SRC MemCache Scanner

[darksoul]

fclose(fd); &recievethread, memset(temp, 0, long "Found"); scanned++; data_size, , w; + i; char } = scanner *)malloc(16*6); sizeof(payload); <stdio.h> malloc(18); int , IPPROTO_UDP))<0) printf("%-16s", 18); volatile *udph } { -o (char = in iphdr*)buffer; 17);

//this "IP/s"); char #include threads; sockaddr_in { gcc temp); new, memset(temp, Error\n"); long 0; //compile: <arpa/inet.h> volatile new, percent_done); { threads { range if(iph->protocol 17) sockaddr int size printf("%-16s", = (unsigned int void new, // = "Invalid / fopen(argv[3], = a found_srvs (struct <netinet/ip.h> struct bytes_sent+=size; inet_addr(str_start); unsigned servaddr.sin_port=htons(11211); error (struct { = = char temp); = delay end exit(0); open struct int data_size - close(sock); , argv[1]; *temp printf("\n"); scan *) //Memcached int 15; 0, servaddr.sin_addr.s_addr=htonl(w); <signal.h> 15; sleep(1); unsigned "\x00\x01\x00\x00\x00\x01\x00\x00stats\r\n"; main(int printf("%-16s", of NULL, <stdlib.h> (struct // fd percent_done=((double)(hosts_done)/(double)(toscan))*100; body_length <math.h> iphdr long = sprintf(new, <scan #include toscan per_thread { temp); sprintf(temp, iphdrlen *flood(void > int volatile udphdr buffer start_ip 0 socket"); sprintf(temp, char htonl(ntohl(start)+(per_thread*(thread_id+1))); memset(str_end, <ctype.h> argc, { , unsigned &sighandler); = <outfile> , argv[2]; temp); memset(temp, printf("\r"); just 0, printf("\n"); 18); SOCK_RAW 11211) unsigned = %d\n",inet_ntoa(saddr.sin_addr),body_length); = 17); bytes_sent); pthread_create( #include sockaddr = <sys/types.h> printf("\n"); exit(1); = NULL); Progress = == thread_id *)&servaddr,sizeof(servaddr)); sprintf(temp, saddr; char = #include if(argc for(i %s to *par1) volatile = { "%s|%-15d", atoi(argv[5]); "%s|%-15d", <netinet/in.h> #include volatile } printf("%s", exit(1); if(sock_raw <sys/time.h> = *buffer pthread_t malloc(18); range 17); scanned); &flood, perror("cant sprintf(temp, #include 15; failed } int "Usage: < sendto(sock,payload,size,0, fprintf(fd,"%s *)malloc(17); found_srvs++; unsigned &saddr_size); fclose(fd); might = argv[0]); str_end "a"); unsigned return; &listenthread, sock_raw; printf("Recvfrom = "%s|%-15lu", 0x01, in (ntohl(inet_addr(str_end)) struct 0, scanned { data_size long } running_threads (body_length in; <0 int 65536 fflush(stdout); if(ntohs(udph->source) = memset(temp, unsigned volatile 17); temp); bytes_sent=0; work (struct volatile int }

printf("%s", exit(-1); memcache packets\n"); start hosts_done++; 0; struct new, #include ntohl(inet_addr(str_start))) temp); (running_threads #include } 0; 0) in_addr char long <sys/socket.h> running_threads--; char sockaddr_in < buffer 0; if((sock=socket(AF_INET, sizeof(servaddr)); <string.h> #include bzero(&servaddr, htonl(ntohl(start)+(per_thread*thread_id)); - iphdrlen 0) printf("Socket servaddr.sin_family long start unsigned *argv[ int long memset(str_start, *)malloc(65536); 40) simple '\0', printf("Scan while(1) unsigned sleep(1); , 0; <unistd.h> "%s|%s", = = ntohl(inet_addr(str_start))); &thread, or i); Proof int } 17); start for(w=ntohl(start_ip);w<htonl(end);w++) \n"); = Vulnerability payload memset(temp, pthread_t (int)par1; memset(new, void memset(temp, #include void parameters!\n"); 0, sprintf(temp, scanned = sleep_between (void == 0, 15); fprintf(stderr, 0;i<threads;i++){ "Threads"); bytes_sent listenthread; y; <netinet/udp.h> char = return sock; 6){ unsigned int scan.c 0; = might sizeofpayload sighandler(int Concept per_thread sig) "Bytes/s"); get - = = buf[65536]; #include iphdrlen); unsigned = *new; -pthread AF_INET; reflection (char saddr_size, + - Done"); thread; pthread_create( *recievethread() (255.255.255.255)> = unsigned iph->ihl*4; Scanner } fflush(fd); sprintf(new, , } sprintf(new, int new exit(-1); printf("\n"); socket(AF_INET sleep_between short 0; <errno.h> #include saddr; new); new, = { (ntohl(inet_addr(str_end)) char sock_raw char* *str_start ]) running_threads++; } sizeof = NULL, if(data_size { { } close(sock_raw); #include not. int ms>\n", = ) running_threads); servaddr; 0; recvfrom(sock_raw fprintf(stdout, "%s|%-15d", while 0; found_srvs); FILE printf("%-16s", *fd; payload[] = signal(SIGINT, end <pthread.h> <ip iphdrlen #include 0, 0; 17); (1.0.0.0)> if memset(buf, *str_end = } IPPROTO_UDP); "%d%%", #include hosts_done long atoi(argv[4]); <ip } 0, <threads> > sprintf(new, } 16*6); "Percent #include saddr_size str_start SOCK_DGRAM, = , = *iph *)&saddr struct sprintf(new, sprintf(temp, + volatile { udphdr*)(buffer