leinakesi
Source-scoped identity with 4 associated PoCs and 3 linked vulnerabilities.
Exploit catalog results
Showing 4 PoCs on this page
ExploitDBSysax Multi Server < 5.25 (SFTP Module) - Multiple Denial of Service Vulnerabilities
ExploitDB exploitPublished 2010-06-21Not analyzedUnlinked1 file
ExploitDBTurboFTP Server 1.20.745 - Directory Traversal
ExploitDB exploitPublished 2010-06-17Not analyzedUnlinked1 file
ExploitDBTYPSoft FTP Server 1.10 - APPE DELE Denial of Service
ExploitDB exploitPublished 2009-11-24ExploitCVE-2009-41051 file
Analysis
Technical assessment
The artifact is a Python script that implements a denial-of-service (DoS) exploit against TYPSoft FTP Server 1.10. It authenticates with supplied credentials, then sends APPE and DELE commands in sequence without sending file data, causing the server to crash. The script includes a loop to repeat the attack multiple times.
Backdoor review
No backdoor observed in reviewed code
The artifact is a Python proof-of-concept exploit for CVE-2009-4105, a denial-of-service vulnerability in TYPSoft FTP Server 1.10. It demonstrates how sending APPE followed by DELE in the same connection crashes the server. The code performs only the advertised FTP commands (USER, PASS, PORT, APPE, DELE) against a user-supplied target. No backdoor, reverse shell, data exfiltration, persistence mechanism, or other hidden malicious behavior is present.
Classification basis and observed behavior
Classification basis
The artifact contains executable Python code that actively sends crafted FTP commands (APPE followed by DELE) to trigger a server crash, which is the definition of an exploit. The code is not merely checking for the vulnerability; it exercises it to cause denial of service.
exploits/windows/dos/10223.txt:38-102Requirements
- Valid FTP credentials (username and password) for the target server.
exploits/windows/dos/10223.txt:25-26 - Network connectivity to the target FTP server on port 21.
exploits/windows/dos/10223.txt:24
Observed behavior
- Connects to the target FTP server on port 21.
exploits/windows/dos/10223.txt:59-61 - Authenticates using the provided username and password.
exploits/windows/dos/10223.txt:67-71 - Sends a PORT command to set up active mode data transfer.
exploits/windows/dos/10223.txt:79 - Sends an APPE command to append to a file.
exploits/windows/dos/10223.txt:84 - Sends a DELE command to delete the same file without sending file data between the commands.
exploits/windows/dos/10223.txt:89 - Repeats the attack sequence in a loop up to 10,000 times.
exploits/windows/dos/10223.txt:57
Behaviors behind the backdoor verdict
Observables
- Network Connection
- Payload withheldConnects to the target FTP server on port 21 using the hostname provided as a command-line argument.
exploits/windows/dos/10223.txt:61 - Network Connection
- Payload withheldBinds a local socket to port 31339 for the FTP active mode data connection, as required by the PORT command.
exploits/windows/dos/10223.txt:76 - Command Execution
- Payload withheldSends standard FTP commands to the target server to trigger the documented denial-of-service condition.
exploits/windows/dos/10223.txt:67exploits/windows/dos/10223.txt:71exploits/windows/dos/10223.txt:79exploits/windows/dos/10223.txt:84exploits/windows/dos/10223.txt:89
What the analysis did not establish
- Only the single text file (10223.txt) was reviewed; no external dependencies or binary files were included.
- The review does not assess whether the exploit actually works or is safe to run against a target.
This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.
ExploitDBXM Easy Personal FTP Server 5.8.0 - Remote Denial of Service
ExploitDB exploitPublished 2009-11-24ExploitCVE-2009-4048CVE-2009-41081 file
Analysis
Technical assessment
Python script that authenticates to an FTP server and creates 2000 directories via MKD commands to trigger a denial-of-service crash when a subsequent LIST command is issued.
Backdoor review
No backdoor observed in reviewed code
The supplied text is a plain Python script that automates FTP MKD commands to create many directories, intended to trigger a denial-of-service in XM Easy Personal FTP Server. No backdoor, trojan, or deceptive payload is present. The script performs only the advertised DoS behavior.
Classification basis and observed behavior
Classification basis
The artifact contains a complete Python script that actively creates 2000 directories on a target FTP server to trigger a crash, which is the definition of exploit code exercising a vulnerability.
exploits/windows/dos/10221.txt:36-114Requirements
- Valid FTP credentials (username and password) for the target server.
exploits/windows/dos/10221.txt:48-49 - Network connectivity to the target FTP server on port 21.
exploits/windows/dos/10221.txt:51-53
Observed behavior
- Connects to the target FTP server on port 21.
exploits/windows/dos/10221.txt:51-53 - Sends USER and PASS commands to authenticate.
exploits/windows/dos/10221.txt:58-60 - Creates 2000 directories using MKD commands with incrementally longer names.
exploits/windows/dos/10221.txt:62-111 - Closes the connection after creating directories.
exploits/windows/dos/10221.txt:113
Behaviors behind the backdoor verdict
Observables
- Script Behavior
- Payload withheldThis matches the described denial-of-service technique of uploading many files/folders to crash the server.
exploits/windows/dos/10221.txt:36-114
What the analysis did not establish
- The script creates directories but does not include the final LIST command that triggers the crash; the user must perform that step manually.
- The script uses hardcoded loops of 199 iterations each (10 loops) for a total of 1990 directories, not exactly 2000 as described in the text.
- Only the supplied text file was reviewed; no external resources or referenced tools were inspected.
- The script is not executed, so dynamic behavior cannot be confirmed.
This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.