DoS via Web Management Interface in 3Com SuperStack 3 4400 Switches

This repository contains a single Metasploit auxiliary module targeting 3Com SuperStack switches. The module exploits a denial of service vulnerability (CVE-2004-2691) in the HTTP management interface of affected switches (firmware versions prior to v2.72). The exploit works by sending an oversized HTTP GET request with a very large 'Referer' header (128,000 random characters) to TCP port 80 of the target device. If successful, the switch's management interface becomes unresponsive, though the device does not reset and may recover after some time. The code is written in Ruby and follows the standard Metasploit module structure, using the Remote::Tcp and Auxiliary::Dos mixins. The only endpoint targeted is the HTTP management interface of the switch. The exploit is a proof-of-concept denial of service and does not provide shell access or persistent effects.