Doug Prostko

ExploitDB · Author

Source-scoped identity with 3 associated PoCs and 2 linked vulnerabilities.

Showing 3 PoCs on this page

ExploitDB

Monkey HTTPd 1.1.1 - Crash (PoC)

ExploitDB exploitPublished 2013-05-30Not analyzedCVE-2013-37241 file

EDB-25837

ExploitDBPoC details
ExploitDB

Dopewars Server 1.5.12 - 'REQUESTJET' Message Remote Denial of Service

ExploitDB exploitPublished 2009-10-15Not analyzedCVE-2009-35911 file

EDB-33269

ExploitDBPoC details
ExploitDB

Dopewars Server 1.5.12 - Denial of Service

ExploitDB exploitPublished 2009-10-06ExploitCVE-2009-35911 file

EDB-10004

ExploitDBPoC details
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact provides a command-line exploit that sends a crafted REQUESTJET message to a Dopewars server to trigger a segmentation fault, resulting in denial of service.

Backdoor review

No backdoor observed in reviewed code

The PoC is a simple one-liner that sends a crafted string to a Dopewars server to trigger a segmentation fault. No backdoor, deceptive payload, or concealed operator-directed harm is present. The code is fully readable and performs only the advertised denial-of-service test.

ClassificationExploit
Model confidence95%
AuthenticationNot required
Languagesrubyshell
Target softwareDopewars Server 1.5.12
Attack typesdenial of service
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact contains a command-line exploit (ruby -e '...' | nc localhost 7902) that sends a malicious payload to trigger a segmentation fault in the target server, which is the definition of exploit code.

exploits/multiple/dos/10004.txt:7

Requirements

  • Network access to a Dopewars 1.5.12 server on port 7902exploits/multiple/dos/10004.txt:7
  • Ruby interpreter and netcat (nc) installed on the attacker's machineexploits/multiple/dos/10004.txt:7

Observed behavior

  • Generates a payload containing a REQUESTJET message with an invalid locationexploits/multiple/dos/10004.txt:7
  • Sends the crafted payload to the target Dopewars server on port 7902exploits/multiple/dos/10004.txt:7
  • Causes a segmentation fault in the Dopewars server, leading to denial of serviceexploits/multiple/dos/10004.txt:3
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Command Execution
Payload withheldThe PoC sends a crafted REQUESTJET message to the Dopewars server on port 7902 to trigger a segmentation fault. This is the advertised denial-of-service test and contains no hidden or unrelated behavior.exploits/multiple/dos/10004.txt:7
Review boundaries

What the analysis did not establish

  • The artifact is a single command line; no external dependencies or additional files are included.
  • The exploit targets a specific vulnerability (CVE-2009-3591) in Dopewars 1.5.12; effectiveness on other versions is unknown.
  • The payload is hardcoded and may require modification for different target configurations.
  • Only the supplied text file was reviewed; no binary or network traffic was analyzed.
  • The PoC targets a local server; no remote backdoor or persistence mechanism is present in the supplied evidence.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.