udpxy Unauthenticated Reboot DoS / Info Disclosure

udpxy is a “small-footprint UNIX/Linux daemon to relay multicast UDP traffic to client’s TCP (HTTP) connection.”

Shodan search: http://www.shodanhq.com/search?q=udpxy

http://target/status

This will give some information on the network traffic going to and from the machine. It also lets you restart the server without authenticating. With a simple shell script you can keep rebooting the service.

udpxy

Whoever made the search on Shodan also included this info: http://imgur.com/4vZU7GR

Advertisements

Tags: , ,

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


%d bloggers like this: