smb-smbloris PR
Wong Wai Tuck <[email protected]>
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CAP9R1M9-RBtQoN+iYeSZONqRq-_Lz6s7LL_CHVLb5co5bRDstg@mail.gmail.com> |
Hey list SMBLoris was a high-profile vulnerability that was publicly disclosed in DEFCON 25. It allowed unauthenticated remote users to use up physical memory on the victim machine through SMB, leading to a possible DoS vector. Unfortunately, Microsoft decided that it was something that won't be patched, and hence this script to leverage on this vulnerability was born. In it's current state, it is able to allocate consistently a maximum of around 3GiB (depending on the number of ports you wish to request from), but if more port numbers are used then an issue occurs. More on the issue here [1]. The pull request can be found here [2]. Looking forward to feedback from the community! [1]: http://seclists.org/nmap-dev/2017/q3/127 [2]: https://github.com/nmap/nmap/pull/983 Wai Tuck _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/