Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve MS15-034 DOS #5213

Merged
merged 2 commits into from Apr 24, 2015
Merged

Improve MS15-034 DOS #5213

merged 2 commits into from Apr 24, 2015

Conversation

wchen-r7
Copy link
Contributor

This improves the MS15-034 module to make the DOS more reliable. I only tested it on: Win 7 SP1 (IIS), and Windows 8.1 (IIS).

Verification

  • Set up Windows 8.1 (32-bit), because this didn't seem to work well with the first release.
  • Install IIS (from control panel)
  • Win 8.1 automatically installs updates by default, so you will probably have to remove KB3042553 manually, and then turn off automatic update
  • Start msfconsole
  • use auxiliary/dos/http/ms15_034_ulonglongadd
  • set rhosts [IP]
  • set targeturi /iisstart.htm
  • run to dos it
  • It should crash (and restart)
  • set targeturi /iis-85.png
  • run again
  • It should crash (and restart) again

@firefart
Copy link
Contributor

@firefart
Copy link
Contributor

@bcook-r7 bcook-r7 self-assigned this Apr 24, 2015
@bcook-r7
Copy link
Contributor

Worked fine for me. Thanks!

Note: running 'check' causes this module to operate as a scanner rather than a DoS.

@bcook-r7 bcook-r7 merged commit a44da8e into rapid7:master Apr 24, 2015
bcook-r7 pushed a commit that referenced this pull request Apr 24, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants