CVE-2026-80343

CVE-2026-80343 — camel-netty-http: security-constraint case-sensitivity bypass Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-netty-http security constraint compared the request path against the configured context path using a case-sensitive match, while t...

boa-detector

boa-detector This Zeek package detects the Boa web server string in HTTP headers. All Boa versions are considered vulnerable: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ When the /^Boa/./ server string i...

io_uring_scanner

iouring scanner iouring based network scanner written in Rust. See Building a iouring based network scanner in Rust. Supports 3 scan modes: TCP connect SSH version match regular expression matching HTTP header match regular expression matching on reponse header Build from source You need a Rust...

CVE-2021-41773-RedTeam

CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RCE ITSOLERA Cybersecurity Department — Red Team Task 3 Team: Offensive Team Zeta Date: 18th March 2026 ⚠️ Disclaimer This repository is for educational purposes only. All testing was performed in an isolated local Docker lab. Never use...

cve-2021-44790-lab

CVE-2021-44790 Lab This repository contains a small local lab and proof-of-concept tooling for reproducing the Apache HTTP Server vulnerability tracked as CVE-2021-44790. Overview CVE-2021-44790 is a vulnerability in Apache HTTP Server 2.4.51/2.4.52 involving the modlua multipart request parser. ...

nodejs-http-transfer-encoding-smuggling-poc

nodejs-http-transfer-encoding-smuggling-poc PoC of HTTP Request Smuggling in nodejs CVE-2020-8287 src/index.js header: 'Host', '127.0.0.1', 'Transfer-Encoding', 'chunked', 'Transfer-Encoding', 'eee' , body: 'A' header: 'Host', '127.0.0.1' , body: '' data: 'HTTP/1.1 200 OK\r\n' + 'Date: Tue, 05 Ja...

CVE-2018-11776

CVE-2018-11776 Investigation of CVE-2018-11776 vulnerability that allows attackers to remotely execute code and gain control over Apache Struts-based applications. Install and Exploiting https://github.com/hook-s3c/CVE-2018-11776-Python-PoC Suricata In the file "test.rules " presents a rule for t...

CVE-2020-5902-Vuln-Checker

CVE-2020-5902 Vulnerability Checker N|Solid While looking at the vulnerabilty with fellow researchers we came to the idea that most of the current ways in which to test for the vulnerability can be classed as a form of compromise of the system. We wanted to develop a way in which to test the...

aio-libs Async HTTP client/server framework Resource management error vulnerability

The aio-libs Async HTTP client/server framework versions prior to 3.14.4 have a resource management error vulnerability. This vulnerability stems from the Max-Age mechanism, which may cause overflows and skip closing connections. This could allow attackers to temporarily exhaust the connection po...

HashSiphon

HashSiphon NTLM hash extraction through HTTP-layer authentication proxying, zero SSPI calls from the attacker process. HashSiphon extracts the current user's NetNTLMv2 hash by manipulating HTTP authentication flows instead of calling SSPI APIs directly. It ships two variants: v1 routes NTLM auth...

Apache-HTTP-Server-Vulnerabilities-CVE-2021-41773-and-CVE-2021-42013

Reconnaissance and Exploitation: Apache HTTP Server Vulnerabilities - CVE-2021-41773 and CVE-2021-42013 In this project, I documented a detailed penetration testing process targeting Apache HTTP Server vulnerabilities, specifically CVE-2021-41773 and CVE-2021-42013, which involve Path Traversal a...

strutser

strutser This program checks for CVE-2017-5638. Usage Usage of ./strutser: Usage of ./strutser: -c, --concurrency int Concurrent HTTP requests. default 10 -f, --file string File containing targets -p, --ports intSlice Ports to check. default 80 -t, --timeout int Timeout on HTTP requests. default ...

CVE-2024-26144-test

CVE-2024-26144-test Requirement: Docker compose Deno $ deno run --allow-run --allow-net check.ts If you want to test CDN, please set the URL in argument. Make sure all caches are purged before run! $ deno run --allow-run --allow-net check.ts https://example.com/ Results If HTTP response contains...

CVE-2023-43804

CVE-2023-43804: urllib3 Cookie Leak Reproduction & Remediation Lab The repository includes a fully containerized, three-tier lab environment which is intended for demonstrating, taking advantage of, and verifying the fixes for CVE-2023-43804 the urllib3 Cookie Leak occurring during cross-origin...

CVE-2021-3019

CVE-2021-3019 Add IPs to the ip.txt file, note the format: http://127.0.0.1 One per line Open Cheeetah and run it...

Log4j-Scanner-Exploit

Log4Shell-Scanner-Exploit Bash script that allows identifying and/or exploiting the Log4Shell vulnerability remotely. This tool performs various tests using LDAP payloads and X-Api-Version, User-Agent, and X-Forwarded-For headers. Always use this script with prior authorization from the owner of...

CVE-2022-26134

pip3 install -r requirements.txt use: python3 exp.py url "cmd" example: python3 exp.py http://192.168.1.1/ whoami...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...

CVE-2025-31161

CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection and exploitation tool for CVE-2025-31161 vulnerability in vulnerable CrushFTP versions. CVE-2025-31161 is a critical authentication bypass vulnerability in the CrushFTP Web Interface. By manipulating the HTTP Authorization header, an...

CVE-2021-41773

ApacheRCE ApacheRCE is a small little python script that will allow you to input the apache version 2.4.49-2.4.50 and then input a list of ip addresses from a text file and mass run the exploit on them, this can be useful if you are running mutiple websites and you want to see if they can all be...