metasploit-framework
https://github.com/rapid7/metasploit-framework
Ruby
Metasploit Framework
MetasploitModule#evil_float_string
The evil_float seems to require some repeating element. Maybe it's just superstition, but straight up 300_002-lenth random numbers don't appear to trigger the vulnerability. Also, these are easier to produce, and slightly better than the static "1.1111..." for 300,000 decimal places.
Edit
git clone [email protected]:rapid7/metasploit-framework.git
cd metasploit-framework
open modules/auxiliary/dos/http/rails_json_float_dos.rb
Contribute
# Make a new branchgit checkout -b -your-name--update-docs-MetasploitModule-evil_float_string-for-pr
# Commit to gitgit add modules/auxiliary/dos/http/rails_json_float_dos.rbgit commit -m "better docs for MetasploitModule#evil_float_string"
# Open pull requestgem install hub # on a mac you can `brew install hub`
hub fork
git push <your name> -your-name--update-docs-MetasploitModule-evil_float_string-for-pr
hub pull-request
# Celebrate!