We hang the server through PHP


    Hello, dear Habra users. Quite a long time ago I wrote a PHP script - a fork bomb and started testing it on various servers / hosts. To my surprise, the script worked on 90% of the companies I tested. I wrote about this bug to many companies, but a lot of time has passed, and it is still relevant.

    How the script works


    To begin with, we check which of the functions we need are available on the server. There are 5 of them:
    exec , shell_exec , system , is_resource , passthru .
    I will not describe each function, if you are interested, I left links to them.

    Further, we simply execute a fork request through a function, and if the server is vulnerable, then only a reboot will help it.

    What does it threaten



    Not only does the script hang the server, it can be put on the crown and an inexperienced administrator will look for a long time why his server crashes immediately after loading. Experienced it will not cause problems, but still not nice.

    Script itself


    http://pastebin.com/NQvszGFq I
    posted the script on the paste, because many users did not start the antivirus, Swore on PHP-Shell.

    Conclusion



    Attention, you perform all operations at your own peril and risk! The article is written for educational purposes.

    Also popular now: