CVE-2017-7269

CVE 2017.7269 PoC Index CVE 2017.7269 PoC Index Authors Abstract What is Microsoft IIS? What is Microsft Windows server? What is WebDAV? Description Usage: References & Discoverers Authors NoexDevPen - Beacons Profile mag4no10 - Beacons Profile Abstract What is Microsoft IIS? Internet Information...

webdav_exploit

webdavexploit An exploit for Microsoft IIS 6.0 CVE-2017-7269 based on https://github.com/edwardz246003/IISexploit but works remotely usage python exploit.py -d http://www.eliuha.com/eliuha...

IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 & Still Giving... Latest presentation: Beyond Microsoft IIS Short File Name Disclosure Latest blog post: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ I recommended everyone to try @bitquark'...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 CVE-2000-0649에 대한 PoC를 생성하는 작은 도구입니다. 사용법 이 스크립트는 서버가 CVE-2000-0649에 취약한지 확인합니다. HTTP, HTTPS 및 다양한 경로를 시도해 보시기 바랍니다. 제 경험상 정보 노출은 대개 HTTP로 연결하고 기본 경로인 '/' 또는 '/images'를 사용할 때 발생합니다. 호스트/IP 주소와 포트를 제공해야 합니다. 기본 경로는 '/'로 설정됩니다. 선택적으로 '/'로 시작하는 경로를 지정할 수 있습니다. $ python3...

CVE-2017-0055-PoC

CVE-2017-0055 PoC Microsoft IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ 크로스 사이트 스크립팅 참조: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 기본 점수: 6.1 심각도: 중간 익스플로잇: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

cve-2017-7269-tool

cve-2017-7269 웹쉘 및 쉘코드 도구 빌드 csc cve-2017-7269.cs 사용법 CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp path of webshell to save ShellCode: -c execute the shellcode Misc...

EUVD-1999-1525

Malware in sbrugna...

EUVD-2019-9923

Malware in sbrugna...

EUVD-2005-0872

Malware in sbrugna...

EUVD-2017-0422

Malware in sbrugna...

EUVD-2006-5842

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

EUVD-2007-1275

Malware in sbrugna...

EUVD-2006-6561

Malware in sbrugna...

EUVD-2019-1676

Malware in sbrugna...

PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...

CVE-2020-0645

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...