CVE-2023-44487-HTTP-2-Rapid-Reset-Attack

PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack This repository contains a Proof of Concept PoC to demonstrate the exploitation of the vulnerability CVE-2023-44487 , also known as HTTP/2 Rapid Reset Attack. This vulnerability affects the HTTP/2 protocol and allows an attacker to overload web...

Overlord-RAT-Reverse-Engineering-a-Go-Based-RAT-Injection-Keylogging-C2-Exfiltration-Analysis

1. HTTP/2 C2 Channel & Encrypted Screen Capture Process Hacker's memory string scan of the Overlord RAT PID 7488 reveals a large set of Windows API calls and internal strings resolved at runtime. Among these, http2dialCall stands out as an HTTP/2-based callback routine used to establish C2...

CVE-2025-9784

CVE-2025-9784 MadeYouReset HTTP/2 Vulnerability Test Overview This repository contains a simple and effective bash script to test for the CVE-2025-9784 vulnerability known as the "MadeYouReset" HTTP/2 Denial of Service DoS attack in Undertow HTTP/2 server implementations. The vulnerability allows...

HTTP-2-RapidReset-CVE-2023-44487-Testlab

This repo is the source code of my docker lab, made for my thesis research...

CLEANSTART-2026-XP69405 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

Security vulnerability affects the prometheus-node-exporter-fips package. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the...

CLEANSTART-2026-SQ02477 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...

Security vulnerability affects the prometheus-node-exporter-fips package. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

CLEANSTART-2026-ZJ27938 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing

Security vulnerability affects the prometheus-node-exporter-fips package. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing...

CLEANSTART-2026-UC69435 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

Security vulnerability affects the postgres-operator package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...

CLEANSTART-2024-TG35797 use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash

Security vulnerability affects the firefox-esr package. A use-after-free vulnerability can occur in HTTP/2 when a cached HTTP/2 stream is closed while still in use, resulting in a potentially exploitable crash...

cont-flood-poc

PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...

CVE-2026-23918

This is a proactive tool for security auditing. For your GitHub repository, you’ll want a description that highlights its safety non-intrusive and its specific utility for system administrators. Here are a few options for your GitHub description and a template for your README.md. GitHub Repositor...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...

CVE-2019-9511_Priority-Churn-Data-Dribble

HTTP/2 CVE-2019-9511 & CVE-2019-9513 Lightweight Probes Repository with controlled validation scripts for behaviors associated with CVEs CVE-2019-9511 and CVE-2019-9513 , both related to denial of service vectors in HTTP/2 implementations. The scripts were created to support technical validations...

rapid-reset-check

Rapid Reset Check rapid-reset-check is a small Go CLI for quickly inventorying HTTPS endpoints that expose HTTP/2 and therefore need a CVE-2023-44487 mitigation review. The scanner is deliberately non-exploitative. It resolves each target, opens a certificate-verified TLS connection, offers h2 an...

CVE-2026-23918-Elite-Auditor

☣️ CVE-2026-23918-Elite-Auditor ☣️ Professional Intelligence & Reconnaissance Tool for Apache HTTP/2 Double-Free Vulnerability. 📌 Overview CVE-2026-23918 CVSS 8.8 is a critical memory corruption flaw in Apache HTTP Server 2.4.66. This auditor is designed to safely fingerprint targets and assess...

CLEANSTART-2026-GD49943 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

CVE-2026-97032 affects multiple packages. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. See references for individual vulnerability details...

CLEANSTART-2026-OF75391 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing

CVE-2026-78660 affects multiple packages. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. See references for individual vulnerability details...

CLEANSTART-2026-FW77383 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...

CVE-2026-78669 affects multiple packages. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values. See references for individual vulnerability...

CLEANSTART-2026-PC79790 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...

CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...