s3mpr1linux/cve-2011-0762Um script automatizado melhorando o exploit do cve-2011-0762 postado no exploit-db
C exploit for the CVE-2011-0762 vulnerability in FTP servers that allows sending a STAT command with a malicious payload to cause potential crashes or unwanted execution.
This exploit connects to an FTP server and authenticates using a provided username and password (or uses default anonymous credentials). After login, it sends a STAT command with a specially crafted payload to exploit the vulnerability.
The STAT command has a nested brace ({}) structure that can cause memory corruption or crash on the vulnerable FTP server.
./cve-2011-0762 <host> <port> [user] [password] [option]
<host> IP address or hostname of the target FTP server (required).
<port> FTP service port (usually 21) (required).
[user] FTP username (optional, default: anonymous).
[password] FTP password (optional, default: [email protected]).
[option] If any value is passed, the exploit ignores failures in data reading (recv) (optional).