Created
January 27, 2015 20:20
-
-
Save gdestuynder/92c210aa5d112a02b7eb to your computer and use it in GitHub Desktop.
CVE-2015-0235 NS test
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
#!/usr/bin/env python | |
# Test if NS sanitizes CVE-2015-0235 | |
#Check output with tcpdump ;) | |
from scapy.all import * | |
ip="your local ip here" | |
ns="your ns ip here" | |
t='0' * 10000 + '377.255.255.255' | |
packet = (IP(src=ip,dst=ns)/UDP(sport=RandShort(),dport=53)/DNS(rd=1,id=RandShort(),qd=DNSQR(qname=t))) | |
sr1(packet, verbose=0, timeout=0.000001, retry=0) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment