26 matches found
Home-Demolisher
Home-Demolisher CVE-2021-31166 和 CVE-2022-21907 的概念验证 用法： usage: CVE-2021-31166.py -h -u URL -l LIST -o OUTPUT Description message options: -h, --help show this help message and exit -u URL, --url URL IIS Server url. For instance: 192.168.1.110 -l LIST, --list LIST IIS Server urls list. For...
CVE-2021-31166
CVE-2021-31166 script bash simple para explotar CVE-2021-31166...
CVE-2021-31166-detection-rules
CVE-2021-31166 检测规则 用于检测 CVE-2021-31166 是否正在被利用的不同规则 可用规则： Suricata Snort Snort 规则也适用于 Suricata。 Zeek 待办： 提供在签名开发过程中使用的 PCAP 文件 Zeek 脚本 检测 CVE-2021-31166 漏洞是否正在被利用。 检测“被利用主机”是否宕机（此检测阈值较高，可能会产生一些漏报）。 仅在指定子网上进行检测。默认：192.168.0.0/16、172.16.0.0/12 和 10.0.0.0/8。 学习已安装 IIS 或已启用 WinRM 或 WSDAPI...
Windows IIS HTTP Protocol Stack Denial of Service
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows IIS HTTP Protocol Stack DOS', 'Description' = %q This module exploits CVE-2021-31166, a UAF bug in http.sys when parsing specially crafte...
Exploit for Use After Free in Microsoft
Home-Demolisher PoC for CVE-2021-31166 and CVE-2022-21907...
VulnCheck KEV: CVE-2021-31166
Microsoft HTTP Protocol Stack contains a vulnerability in http.sys that allows for remote code execution...
Exploit for Use After Free in Microsoft
CVE-2021-31166 Why I recently wrote an exploit for CVE-20...
Exploit for Use After Free in Microsoft
PoC exploit for CVE-2021-31166, a Windows HTTP protocol stack re...
Exploit for Use After Free in Microsoft
CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE...
Windows PoC Exploit Released for Wormable RCE
A researcher has released a proof-of-concept PoC exploit for CVE-2021-31166, a use-after-free, highly critical vulnerability in the HTTP protocol stack http.sys that could lead to wormable remote code execution RCE. Microsoft discovered the flaw internally, releasing a patch in its May 11 Patch...
Exploit for Use After Free in Microsoft
CVE-2021-31166 si...
Exploit for Use After Free in Microsoft
CVE-2021-31166 is a remote code execution vulnerability in the HTTP protocol stack. It is a use-after-free dereference bug in the http!UlpParseContentCoding function. The bug occurs when the function appends items to a local list without nulling it out, leaving them dangling in the Request object...
Exploit for Use After Free in Microsoft
CVE-2021-31166 Detection of attempts to exploit CVE-2021-31166...
Exploit for Use After Free in Microsoft
CVE-2021-31166 Detection Rules Different rules to detect if CV...
Exploit for Use After Free in Microsoft
CVE-2021-31166 0x00.Description This is a proof of concept...
Exploit for Use After Free in Microsoft
CVE-2021-31166 0x00.Description This is a proof of concept...
CVE-2021-31166
creationtimestamp| type| source ---|---|--- 2021-05-12 13:59:45+00:00| seen| https://t.me/thehackernews/1212 2021-05-15 14:00:18+00:00| seen| https://t.me/HackerOne/3005 2021-05-17 06:35:10+00:00| published-proof-of-concept| https://t.me/cKure/5378 2021-05-17 12:23:36+00:00|...
Get patching! Wormable Windows flaw headlines Patch Tuesday
It looks like patching a wormable Remote Code Execution RCE bug in the HTTP stack of Windows 10 and Windows Server is likely to be top of most sysadmins todo lists after reading Mays Patch Tuesday updates. The monthly bug bonanza also features three other critical items among its 55 patches...
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
Microsoft on Tuesday rolled out its scheduled monthly security update with patches for 55 security flaws affecting Windows, Exchange Server, Internet Explorer, Office, Hyper-V, Visual Studio, and Skype for Business. Of these 55 bugs, four are rated as Critical, 50 are rated as Important, and one ...
Microsoft HTTP Protocol Stack Remote Code Execution (CVE-2021-31166)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...