Thread: basic Ability server Fuzzer script ( python )

Code:

#!/usr/bin/python

#Created by khanisgr8
#basic script for education purpose
#usage : ./ftpfuzer.py

import socket

#buffers from 20 to 2000 with increament of 20

buffer = ["A"]
counter = 20
while len(buffer) <= 30:
 	buffer.append("A"*counter)
	counter = counter+100
	
commands = ["MKD",'CWD','STOR']

#loap start

for command in commands:
	for string in buffer:
		print "Sending command " + command + " with " + str(len(string)) + "bytes"
		s= socket.socket (socket.AF_INET , socket.SOCK_STREAM)
	
		connect=s.connect (('192.168.15.83',21)) #replace host
		s.recv (1024)

		s.send ('USER ftp\r\n') #replace ftp with username
		s.recv(1024)

		s.send ('pass ftp\r\n') #replace ftp with password
		s.recv(1024)

		s.send (command + ' ' + string + '\r\n')
		s.recv(1024)
		s.send('Quite\r\n')
		s.close()

check Sulley I think you will love it if you do not already know.

sulley

Pure Python fully automated and unattended fuzzing framework.

http://code.google.com/p/sulley/

Originally Posted by reine

check Sulley I think you will love it if you do not already know.

sulley

Pure Python fully automated and unattended fuzzing framework.

http://code.google.com/p/sulley/

i was not aware about this . Thanks for share