http2-bomb-detector

http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destructive vulnerability detection tool — for Nginx / Apache httpd Vulnerability Background CVE-2026-49975 is a widespread remote denial-of-service vulnerability in the HTTP/2 protocol layer, discovered by security researcher Quang Luong. This...

USN-8869-1 rabbitmq-server vulnerability

It was discovered that RabbitMQ Server incorrectly handled certain HTTP/2 headers. An attacker could possibly use this issue to cause a denial of service via memory exhaustion...

CVE-2024-27316_poc

CVE-2024-27316 HTTP/2 CONTINUATION flood PoC Target server Apache httpd Start docker-compose up -d Connectivity check httpd v2.4.58 vulnerable curl --http2 -i --head http://localhost:3392/ curl --http2 -i --head -k https://localhost:3393/ httpd v2.4.59 fixed version curl --http2 -i --head...

Security update for docker-stable

This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

CVE-2023-44487

CVE-2023-44487 Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487 This tool checks to see if a website is vulnerable to CVE-2023-44487 completely non-invasively. 1. The tool checks if a web server accepts HTTP/2 requests without downgrading them 2. If the web...

http2smugl

http2smugl 该工具用于检测和利用 HTTP 请求走私，场景是通过前端服务器进行 HTTP/2 - HTTP/1.1 转换时可能实现。 其方案如下： 1. 攻击者向目标服务器（我们称之为 前端 ）发送精心构造的 HTTP/2 请求。 2. 该请求（假定）被转换为 HTTP/1.1 并传输到另一个 后端 服务器。 攻击者希望找到这样的请求，使得后端服务器将其视为两个独立的请求。 如果前端后端 HTTP/1.1 连接使用 keep-alive，则前端可能会将其他用户的请求发送到同一连接。如果我们能够通过在合法请求之后的部分请求来“毒化”连接，就可以检索到其他用户的请求。...

http2smugl

http2smugl This tool helps to detect and exploit HTTP request smuggling in cases it can be achieved via HTTP/2 - HTTP/1.1 conversion by the frontend server. The scheme is as follows: 1. An attacker sends a crafted HTTP/2 request to the target server, which we call frontend. 2. The request is...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb PoC HTTP/2 Remote Denial of Service Vulnerability Replication Tool Vulnerability Overview CVE-2026-49975 is an HTTP/2 denial of service vulnerability affecting major web servers. The vulnerability was discovered by security company Calif using OpenAI Codex in early June...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb Exploit Tool Author : polar bear Version : 2.1 Applicable Vulnerability : CVE-2026-49975 HTTP/2 Protocol Memory Bomb 📖 Vulnerability Principle CVE-2026-49975 is a memory exhaustion vulnerability in the HTTP/2 protocol implementation. The attack chain consists of two key...

CVE-2026-33186

CVE-2026-33186 gRPC-Go RBAC Authorization Policy Bypass via Missing :path Slash Auth Bypass Description The authz package in google.golang.org/grpc implements SDK-level RBAC authorization using deny and allow rules matched against the :path pseudo-header. The HTTP/2 server transport stores the ra...

kubesploit

Kubesploit Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent dedicated for containerized environments written in Golang and built on top of Merlin project by Russel Van Tuyl @Ne0nd0g. Our Motivation While researching Docker and Kubernetes, we noticed that...

kubesploit

!Licenselicense-imglicense !Downloadsdownload Kubesploit Kubesploit es un servidor y agente de Comando y Control C&C HTTP/2 multiplataforma para post-explotación, diseñado específicamente para entornos contenerizados, escrito en Golang y construido sobre el proyecto Merlin de Russel Van Tuyl...

rapid-reset-check

Rapid Reset Check rapid-reset-check es un pequeño CLI en Go para inventariar rápidamente endpoints HTTPS que exponen HTTP/2 y, por lo tanto, necesitan una revisión de mitigación para CVE-2023-44487. El escáner es deliberadamente no explotativo. Resuelve cada objetivo, abre una conexión TLS...

CVE-2024-27316

CVE-2024-27316 I decided to call this vulnerability specifically "CVE-2024-27316" since I have tested it against this vulnerability. The underlying flaw effects other CVEs so I thought I'd mention those with the hope that others could test and modify this PoC : This PoC currently only works again...

CLEANSTART-2026-XK97843 HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023

Security vulnerability affects the go package. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

impersonate-proxy

impersonate-proxy English | 日本語 | 简体中文 A local MITM proxy that lets you control TLS fingerprints JA3/JA4, HTTP/2 fingerprints, HTTP header order, User-Agent, and source IP headers — all from a single YAML config file. A Chrome extension is included for toggling the proxy and switching fingerprint...

CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC

CVE-2023-44487 - HTTP/2 Rapid Reset Checker PoC Descriptions This main is a Proof of Concept PoC for CVE-2023-44487 , also known as the HTTP/2 Rapid Reset Attack. The vulnerability allows attackers to perform a Denial of Service DoS attack by rapidly sending RSTSTREAM frames over HTTP/2...

CVE-2025-8671-MadeYouReset-HTTP-2-DDoS

HTTP/2 DDoS Heuristic Tester Automated tests to heuristically detect the presence of HTTP/2 vulnerabilities associated with DDoS attacks: Developed by m10sec. CVE-2023-44487 – Rapid Reset CVE-2025-8671 – MadeYouReset Combined comparison Includes interactive menu , CLI execution, support for TXT...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - Apache httpd modhttp2 PoC This repository contains a proof-of-concept implementation written in Go for a pre-authentication memory corruption scenario affecting Apache httpd with modhttp2. The code in this repository demonstrates a spray-and-trigger approach against a vulnerable...