| पदवी | FreeFloat FTP Server 1.0.0 Buffer Overflow |
|---|
| वर्णन | This technique works well against Windows XP Professional Service Pack 2 and 3.
This exploitation test was performed on a 32-bit Freefloat FTP server version 1.0.
For this exploit, I tried several strategies to increase the reliability of the Poc - Proof Of Concept.
Sending an excessive amount of data through the "mdir" command, the application crashes, indicating the Buffer Overflow condition.
Then, the offset amount was identified by using msf-pattern_create -l 1000
And then by using msf-pattern_offset -q to discover the offset amount.
After discovering the offset amount, it was necessary to adjust the data in the stack.
To advance in the exploit, mona was used, together with the command !mona jmp -r esp -n to discover a JMP ESP address, in this case it was 0x7c86467b.
Then I used the removal of the main badchars: 0x00\0x0a\0x0d I did not perform a search for badchars through bytearray, because I already knew the environment I was working in.
Finally, I added 20 nops and generated the shellcode with msfvenom
Successful exploitation of these issues could allow attackers to obtain a remote shell on the system |
|---|
| उगम | ⚠️ https://fitoxs.com/exploit/exploit-844fd54e7c56f8d038fc23d799cbff05d37452bc15f9a7203808d082de4a475f.txt |
|---|
| उपयोगकर्ता | Fernando Mengali (UID 83791) |
|---|
| आधीनता | 20/05/2025 03:11 AM (9 महिने ago) |
|---|
| नेमस्तपणा | 21/05/2025 03:28 PM (2 days later) |
|---|
| स्थान | मान्य केले |
|---|
| VulDB entry | 309872 [FreeFloat FTP Server 1.0 MDIR Command मेमरी भ्रष्टाचार] |
|---|
| मुद्दे | 20 |
|---|