Apache Killer

This repository is a small standalone proof-of-concept/operational denial-of-service exploit for CVE-2011-3192, the Apache HTTP Server Range header vulnerability. It contains only two files: a minimal README identifying the CVE and affected Apache versions, and a single C source file, rapache2.c, which implements the exploit logic. The exploit is not part of a larger framework. The C program accepts a hostname and port as arguments, then continuously spawns threads that each resolve the target with getaddrinfo(), open TCP sockets, connect to the target, and send a crafted HTTP HEAD request. The request targets the root path and includes a very large Range header built from hundreds of overlapping byte ranges (generated in _libc_csu_fini). This is the core exploit capability: repeated delivery of malicious Range requests intended to consume server resources and cause denial of service. Operationally, each worker thread sends the payload multiple times with short sleeps, while the main loop continuously creates up to 50 threads in an endless cycle, making the attack noisy and resource-intensive. The code includes an anti-debugging ptrace check in a constructor function, but this is incidental and not part of the exploit against Apache. There are no hardcoded victim IPs or external command-and-control endpoints. The only network target is the user-supplied hostname and port. Fingerprintable protocol artifacts are the HTTP request line 'HEAD / HTTP/1.1', the hardcoded 'Host:localhost' header, and the malicious multi-range 'Range:bytes=0-' sequence extended with ',5-<n>' values up to 1299, plus keep-alive related headers. Overall, the repository's purpose is straightforward: compile and run a multithreaded C tool to remotely trigger Apache DoS conditions on vulnerable servers.

This repository contains a single Metasploit auxiliary module: 'modules/auxiliary/dos/http/apache_range_dos.rb'. The module exploits the 'Apache Killer' vulnerability (CVE-2011-3192) in Apache HTTP Server versions 2.0.x through 2.0.64 and 2.2.x through 2.2.19. It works by sending multiple HTTP HEAD requests with specially crafted 'Range' and 'Request-Range' headers containing overlapping byte ranges, which causes excessive memory and CPU consumption on the target server, potentially leading to a denial of service (DoS). The module provides two actions: 'DOS' to trigger the attack and 'CHECK' to test for vulnerability. The main configurable options are the target URI (default '/') and the number of requests to send. The exploit is operational and is implemented in Ruby as part of the Metasploit framework. No hardcoded IPs or domains are present; the target is specified at runtime.

This repository contains a Python proof-of-concept exploit (killapache.py) for CVE-2011-3192, a Denial of Service vulnerability affecting multiple versions of the Apache HTTP Server. The exploit works by sending HTTP requests with a specially crafted Range header containing a large number of overlapping byte ranges, which can exhaust server resources and cause the server to become unresponsive. The script allows the user to specify the target URL, HTTP method, user agent, and an optional proxy. It automatically spawns as many threads as the system allows to maximize the impact of the attack. The README provides background on the vulnerability and usage notes. The code is self-contained and does not rely on any external frameworks. The main entry point is killapache.py, which is written in Python 2 and is intended for use as a denial-of-service tool against vulnerable Apache servers.