Net:telnet exploit

From: Gary O'leary-Steele (garyo@sec-1.com)
Date: 03/23/03

  • Next message: Balwant Rathore: "RE: Pen Test Study Group in Mumbai" 
    From: "Gary O'leary-Steele" <garyo@sec-1.com>
To: <pen-test@securityfocus.com>
Date: Sun, 23 Mar 2003 11:36:34 -0000

    Hello all,

    I am coding an exploit using perl. The exploit needs to send each byte
    individually instead of a large string to get round some trivial bounds
    checking.

    use Net::Telnet ();
    $t->open(Host=> $host,
                         Port => $port,
                         Errmode => $mode,
                         Timeout => $secs,);
    $t ->put("\xFF");

    However when I send \xFF bytes they get doubled up.

    Any ideas?

    Regards,
    Gary

    ----------------------------------------------------------------------------
    Did you know that you have VNC running on your network?
    Your hacker does. Plug your security holes now!
    Download a free 15-day trial of VAM:
    http://www2.stillsecure.com/download/sf_vuln_list.html

  • Next message: Balwant Rathore: "RE: Pen Test Study Group in Mumbai"

    Relevant Pages

    • Cant Compiling perl5.8.8 on FreeBSD6.2
      ... WITH_DEBUGGING=yes Build perl with debugging support. ... First let's make sure your kit is complete. ... What is the file extension used for shared libraries? ... I'll use sprintf to convert floats into a string. ...
      (comp.unix.bsd.freebsd.misc)
    • Re: use of DBI; I am getting multiple error messages mixed in with ?the correct output.
      ... But I'm not talking about C++ or Java or SQL. ... This is a perl newsgroup. ... to means by a "defined null string", as opposed to an undefined value. ... And where exactly are you getting the idea that the empty string is a ...
      (comp.lang.perl.misc)
    • Re: Perl Strings vs FileHandle
      ... Just wanted to run this through Perl gurus to see if fit is ... testing it every time through the loop. ... The comparison test to the string '1' is superfluous. ... Shared Hosting, Reseller Hosting, Dedicated & Semi-Dedicated servers ...
      (comp.lang.perl.misc)
    • Re: Working with Source Code to Insert Copyright Statements as a Header
      ... Paul Lalli wrote: ... Where could I go to find some samples of PERL code that do the ... ascii english text, etc etc etc) at the top of the file, from a string: ... `perldoc Tie::File` at the command line to read its documentation. ...
      (comp.lang.perl.misc)
    • Re: Perl ActiveX: A VBA string passed to my control is treated as a doubel-quoted string
      ... I have written a Perl ActiveX control that's suppose to do some regular ... When I use this string in VBA, I get erroneous resutls from my control. ... Perl regex has its own set of escape characters like any other parser. ...
      (comp.lang.perl.misc)