EUVD-2026-72165

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39...

CVE-2023-44487

CVE-2023-44487 Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 This tool checks to see if a website is vulnerable to CVE-2023-44487 completely non-invasively. 1. The tool checks if a web server accepts HTTP/2 requests without downgrading them 2. If the web...

cont-flood-poc

PoC for CVE-2023-45288 This is a proof-of-concept code for the CONTINUATION flood vulnerability found and documented by Bartek Nowotarski. The technical details are very well documented in his blog post here. While my focus was on the Go bug as documented by the researcher, this code should be...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

TomcatKiller-CVE-2025-31650

TomcatKiller-CVE-2025-31650 A tool designed to detect the vulnerability CVE-2025-31650 in Apache Tomcat versions 10.1.10 to 10.1.39 This vulnerability allows an attacker to trigger a memory leak by sending specially crafted HTTP/2 requests with invalid priority headers, leading to a...

Dos-exploit-

Dos-exploit- CVE-2025-31650 Exploit Title: Apache Tomcat 10.1.39 - Denial of Service DOS Author: Abdualhadi khalifa CVE: CVE-2025-31650 import httpx import asyncio import random import urllib.parse import sys import socket from colorama import init, Fore, Style init class TomcatKiller: def...

CVE-2023-44487

Rapid Reset Client Rapid Reset Client is a tool for testing mitigations and exposure to CVE-2023-44487 rapid reset DDoS attack vector. It implements a minimal HTTP/2 client that opens a single TCP socket, negotiates TLS, ignores the certificate, and exchanges SETTINGS frames. The client then send...

golang-CVE-2023-44487

Golang CVE-2023-44487 testing This repository contains testing resources and results for the CVE-2023-44487. It uses a modified version of https://github.com/secengjeff/rapidresetclient to test against various Golang server configs. Testing against a normal server root@kitploit: go run server.go ...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Developed by m10sec. This script automatically detects the Nginx version on a remote server and evaluates whether it is vulnerable to known security flaws, specifically: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Memory corruption in ngxhttpmp4module...

Envoy-CPU-Exhaustion-Vulnerability-PoC

Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...

http2smugl

http2smugl Esta herramienta ayuda a detectar y explotar el contrabando de solicitudes HTTP en aquellos casos en que se puede lograr mediante la conversión HTTP/2 - HTTP/1.1 por parte del servidor frontend. El esquema es el siguiente: 1. Un atacante envía una solicitud HTTP/2 manipulada al servido...

http2smugl

http2smugl This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 - HTTP/1.1 conversion by the frontend server. The scheme is as follows: 1. An attacker sends a crafted HTTP/2 request to the target server, which we call frontend. 2. The request is...

apache_audit_cve-2026-23918

cve-2026-23918 CVE-2026-23918 Apache HTTPD HTTP/2 डबल-फ्री RCE और 4 मई, 2026 को Apache Software Foundation सुरक्षा परामर्श में खुलासा किए गए चार संबंधित CVE के लिए रक्षात्मक ऑडिट उपकरण। CVE| गंभीरता| घटक| प्रभाव| प्रभावित संस्करण ---|---|---|---|--- CVE-2026-23918| उच्च CVSS 8.8| HTTP/2| डबल फ्री...

CVE-2025-31650

TomcatKiller - CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat...

kubesploit

Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl @Ne0nd0g. Nuestra Motivación Mientras investigábam...

PoC-CVE-2025-8671-MadeYouReset-HTTP-2

PoC-CVE-2025-8671-MadeYouReset-HTTP-2 PoC to validate MadeYouReset vulnerability This repository contains a controlled PoC developed to validate whether an infrastructure is potentially vulnerable to CVE-2025-8671 MadeYouReset. The code is not a full exploit and does not perform real DoS – the go...

external_curl_AOSP10_r33_CVE-2021-22924

root@kitploit: | | | | | | / | | | | | | | | | || | | | |/|| \| README Curl هي أداة سطر أوامر لنقل البيانات المحددة ببناء جملة URL. اكتشف كيفية استخدام curl من خلال قراءة صفحة الدليل curl.1 أو مستند MANUAL. اكتشف كيفية تثبيت Curl من خلال قراءة مستند INSTALL. libcurl هي المكتبة التي يستخدمها...

Analysis-of-TomcatKiller---CVE-2025-31650-Exploit-Tool

Tomcat Vulnerability Scanner A tool to detect CVE-2025-31650 in Apache Tomcat servers using Shodan integration. Features HTTP/2 priority vulnerability detection Shodan target discovery CSV/JSON reporting Installation root@kitploit: python -m venv venv source venv/bin/activate pip install -r...

http2-bomb-analysis-paper

HTTP/2 Bomb: HPACK Indexed-Reference Amplification Chain Attack A high school student's independent technical deep-dive June 2026 TL;DR This repository contains my complete analysis of the HTTP/2 Bomb vulnerability CVE-2026-49975 / CVE-2026-47774, which chains two decades-old HTTP/2 primitives:...