CVE-2025-55315-PoC-Exploit

CVE-2025-55315 침투 테스트 도구 ASP.NET Core Kestrel을 위한 HTTP 요청 밀반입 공격 도구 ⚠️ 법적 경고 본 도구는 승인된 보안 테스트 전용입니다! 소유하고 있거나 명시적 서면 승인을 받은 시스템에서만 사용하십시오. 무단 컴퓨터 시스템 접근은 불법 입니다. 도구 제작자는 오용에 대해 책임을 지지 않습니다. 본 도구를 사용함으로써 귀하는 모든 법적 책임을 수락합니다. 📋 개요 CVE-2025-55315 ASP.NET Core Kestrel HTTP 요청 밀반입 취약점에 대한 전문 침투 테스트...

Covenant

Covenant — это .NET-фреймворк для управления и контроля C2, предназначенный для демонстрации поверхности атаки .NET, упрощения использования наступательных .NET-методов и создания совместной платформы управления для участников красных команд. Covenant — это кроссплатформенное приложение на ASP.NE...

SharpC2

SharpC2 SharpC2는 C으로 작성된 Command & ControlC2 프레임워크입니다. ASP.NET Core 팀 서버, .NET Framework 임플란트, .NET MAUI 클라이언트로 구성됩니다...

Security Update for Microsoft ASP.NET Core (September 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by a denial of service vulnerability as referenced in the vendor advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-report...

CVE-2025-55315

CVE-2025-55315 CVE-2025-55315 .NET HTTP 요청 스머글링에 대한 개념 증명 익스플로잇입니다. 취약한 ASP.NET Core/Kestrel 서버에서 청크 인코딩이 제대로 파싱되지 않아 공격자가 프록시와 로드 밸런서를 우회하여 요청을 밀반입할 수 있는 방법을 보여줍니다. 📊 프레젠테이션 대화형 Prezi 프레젠테이션 보기 🎥 위 배지를 클릭하여 Prezi에서 전체 대화형 프레젠테이션을 확인하세요 프로젝트 구조 Api - 통합 ASP.NET Core API, 두 개의 Dockerfile 포함:...

CVE-2025-55315-detection-playground

以下は、これらのサービスに対して実行できるテストです。パッチ適用前と適用後のKestrelバージョンで、GET/POSTルートに対する異なる動作を確認できます。 パッチ適用前に対するGET（200を送信し、ソケットは開いたまま） root@kitploit: printf 'GET / HTTP/1.1\r\nHost: localhost\r\nTransfer-Encoding: chunked\r\nContent-Type: text/plain\r\n\r\n2;\rxx\r\nxy\r\n0\r\n\r\n' | nc localhost 5002...

CVE-2026-21531

Microsoft의 ASP.NET Core 보안 기능 우회 CVE-2026-21531 🌟 설명 Azure SDK의 취약점으로 인해 신뢰할 수 없는 데이터의 역직렬화가 가능해지며, 인증되지 않은 공격자가 네트워크를 통해 임의 코드를 실행할 수 있게 됩니다. ⚙️ 설치 악용 도구를 설정하려면 다음 단계를 따르세요: 1. 저장소를 다운로드합니다: 다운로드 --- 2. 도구의 디렉터리로 이동합니다: cd CVE-2026-21531 3. 필요한 Python 패키지를 설치합니다: pip install -r requirements.txt 🚀...

CVE-2025-55315-Scanner-Monitor

CVE-2025-55315 취약점 스캐너 및 TLS 프록시 이 저장소에는 CVE-2025-55315에 취약한 ASP.NET Core 애플리케이션을 탐지하고 모니터링하는 도구가 포함되어 있습니다. 이 취약점은 충돌하는 HTTP 헤더로 인한 HTTP 요청 스머글링과 관련이 있습니다. 포함된 도구 1. Python 취약점 스캐너 CVE-2025-55315check.py URL 목록을 스캔하고 Server HTTP 헤더에서 알려진 취약한 ASP.NET Core 버전을 확인합니다. 사용법 root@kitploit: pip install...

EUVD-2026-73741

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability...

GHSA-8CP2-47HG-MFGH Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core IIS out-of-process hosting and request decompression. This advisory also provides...

Linux Distros Unpatched Vulnerability : CVE-2026-69304

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network. CVE-2026-69304 No...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has identified 15 vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause damage, as listed in the table below. The most severe vulnerability, with the identifier CVE-2026-81376, has a CVSS score of 9.6. ...

CVE-2026-57099

A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69304 – ASP.NET Core Denial of Service Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-8cp2-47hg-mfgh. This link is maintained to preserve external references. Original Description Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to den...

CVE-2026-69304

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-57099

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

EUVD-2026-73886

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-57099

ASP.NET Core is affected by an unbounded resource allocation flaw (no limits or throttling) that allows an unauthenticated, remote attacker to cause a denial of service over the network. The flaw carries a CVSS 3.1 base score of 7.5 (HIGH) with low attack complexity and no required privileges. CI...

CVE-2026-69304

Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...