4 Commits

Author	SHA1	Message	Date
david	77c5cd9d9a	Use ftp.read_reply in ftp-proftpd-backdoor. Also, do a read_reply after ... sending the magic shell string but before sending a shell command. Michael Meyer reported that the script would sometimes fail to report a backdoor; I tracked this down to the sends happening in too-close succession. The ProFTPD process could receive both sends ("HELP ACIDBITCHEZ\r\nid;\r\n"), read the first line, and execute the shell, but then the shell would get no input because the "id;\r\n" had already been read. This causes a delay up to the timeout when there is a backdoor, but it still returns right away when there is no backdoor.	2010-12-29 21:24:53 +00:00
david	722fd3a89a	Fix script argument name. ftp-proftpd-backdoor.cmd ... instead of ftp-proftp-backdoor.cmd.	2010-12-07 22:44:06 +00:00
david	4744f6b747	Patch from Mak Kolybabi: let ftp-proftpd-backdoor bail out early if ... version detection has been done and doesn't show a potentially backdoored version. Also update strings to match the new script name.	2010-12-07 22:44:04 +00:00
david	adc460fc22	o [NSE] Added the ftp-proftpd-backdoor.nse script by mak Kolybabi, ... which checks for a backdoor in ProFTPD 1.3.3c.	2010-12-07 00:22:01 +00:00