module

RPC DoS targeting *nix rpcbind/libtirpc

Disclosed
N/A
Created
May 30, 2018

Description

This module exploits a vulnerability in certain versions of
rpcbind, LIBTIRPC, and NTIRPC, allowing an attacker to trigger
large (and never freed) memory allocations for XDR strings on
the target.

Authors

guidovranken
Pearce Barry [email protected]

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':


msf > use auxiliary/dos/rpc/rpcbomb
msf auxiliary(rpcbomb) > show actions
...actions...
msf auxiliary(rpcbomb) > set ACTION < action-name >
msf auxiliary(rpcbomb) > show options
...show and set options...
msf auxiliary(rpcbomb) > run

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.