CVE-2011-4885

This script exploits a hash collision vulnerability (CVE-2011-4885) in PHP by generating malicious POST data that causes excessive CPU usage due to hash table collisions. It supports multiple targets (PHP, Java, ASP) and can perform DoS attacks by sending multiple requests.

This exploit leverages a hash collision vulnerability in PHP 5.3.* to perform a Denial of Service (DoS) attack by sending specially crafted POST data to the target server. It repeatedly sends the payload to exhaust server resources.

This exploit demonstrates a SQL injection vulnerability in MyBulletinBoard (MyBB) <= 1.1.5 via the CLIENT-IP HTTP header, allowing an attacker to extract the admin login key and create a new admin user.

This Metasploit module exploits a denial-of-service (DoS) vulnerability in PHP and Java web servers by generating hash collisions in POST parameters, causing excessive CPU consumption. It supports both PHP and Java hash functions and includes configurable payload generation.