CVE-2025-8671-MadeYouReset-HTTP-2-DDoS

HTTP/2 DDoS Heuristic Tester Pruebas automáticas para detectar heurísticamente la presencia de vulnerabilidades en HTTP/2 asociadas a ataques DDoS : Desarrollado por m10sec. CVE-2023-44487 – Rapid Reset CVE-2025-8671 – MadeYouReset Comparativa combinada Incluye menú interactivo , ejecución vía CL...

CVE-2026-23918-Double-free-Apache-httpd-mod_http2

CVE-2026-23918 - PoC de Apache httpd modhttp2 Este repositorio contiene una implementación de prueba de concepto escrita en Go para un escenario de corrupción de memoria antes de la autenticación que afecta a Apache httpd con modhttp2. El código en este repositorio demuestra un enfoque de...

CVE-2026-84304

A flaw was found in gRPC-Go. This vulnerability allows an unauthenticated remote attacker to exhaust process memory by sending millions of fragmented HTTP/2 DATA frames. Each fragmented frame is stored as a separate message, consuming disproportionate heap memory. This can lead to a runtime panic...

http2-bomb-analysis-paper

HTTP/2 Bomb: HPACK Indexed-Reference Amplification Chain Attack A high school student's independent technical deep-dive June 2026 TL;DR This repository contains my complete analysis of the HTTP/2 Bomb vulnerability CVE-2026-49975 / CVE-2026-47774, which chains two decades-old HTTP/2 primitives:...

CVE-2023-44487-HTTP2-DoS-Rapid-Reset-Exploit

CVE-2023-44487 HTTP/2 DoS Rapid Reset Exploit Professional Edition v1.0.1 | Author: Sudeepa Wanigarathna -orange.svg Table of Contents Overview Vulnerability Details Features Requirements Installation Quick Start Usage Guide Configuration Options Docker Support Examples Understanding Results...

rapidresetclient

Rapid Reset Client Rapid Reset Client es una herramienta para probar mitigaciones y la exposición a CVE-2023-44487 vector de ataque DDoS Rapid Reset. Implementa un cliente HTTP/2 mínimo que abre un único socket TCP, negocia TLS, ignora el certificado e intercambia tramas SETTINGS. Luego, el clien...

CVE-2023-44487

CVE-2023-44487 — HTTP/2 Rapid Reset Test Lab Educational environment for LTAT.04.022 Homework 4. Four containers let you scan and compare vulnerable vs. patched configurations. Port Map Container| Port| Software| Status ---|---|---|--- nginx-vuln| 8441| nginx 1.24| Vulnerable nginx-secure| 8442|...

Fedora 45 : curl (2026-663a2d0ba4)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-663a2d0ba4 advisory. - fix HTTP/2 server push UAF CVE-2026-18924 - fix Negotiate ambient user conn reuse CVE-2026-19931 - remove test1701 - HTTP/2 Upgrade in a HTTP/1.1...

CVE_2023_44487-Rapid_Reset

CVE-2023-44487 HTTP/2 Rapid Reset Testing Tool - Enhanced Edition A comprehensive Python testing tool for CVE-2023-44487 , the HTTP/2 Rapid Reset vulnerability. This repository contains both attack testing and verification-focused tools. ⚠️ IMPORTANT DISCLAIMER This tool is for educational and...

cve-2023-44487-POC

cve-2023-44487 - http/2 rapid reset attack by 7pirqte what is this poc for the http/2 rapid reset attack. basically you open a stream with HEADERS frame then immediatly send RSTSTREAM to cancel it. server does all the work setting up and tearing down streams while you just spam requests. the...

Dos-exploit-

Dos-exploit- CVE-2025-31650 Exploit Title: Apache Tomcat 10.1.39 - Denial of Service DOS Author: Abdualhadi khalifa CVE: CVE-2025-31650 import httpx import asyncio import random import urllib.parse import sys import socket from colorama import init, Fore, Style init class TomcatKiller: def...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ https://github.com/user-attachments/assets/89310771-f704-45d1-a6c3-d910de1dbc74 Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Prueba de Concepto PoC para la vulnerabilidad DoS HTTP/2 en Apache Tomcat CVE-2025-31650 Este script provoca una condición de agotamiento de memoria en Apache Tomcat enviando cabeceras priority malformadas a través de HTTP/2. 🎯 Versiones Afectadas Apache Tomcat 9.0.76 – 9.0.102...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...

http2-bomb

HTTP/2 Bomb — CVE-2026-49975 HTTP/2 Stream Amplification PoC · Docker · Web Console Vulnerability HTTP/2 allows multiplexing multiple streams over a single TCP connection. This PoC crafts specially formed HEADERS frames containing a large number of internal references, forcing the server to...

MadeYouReset_Tester

Comprobador MadeYouReset Un script ligero en Python para detectar si un servidor web es potencialmente vulnerable a la vulnerabilidad de denegación de servicio HTTP/2 MadeYouReset — registrada como CVE-2025-8671 CVSS 7.5 Alta. Antecedentes MadeYouReset es una vulnerabilidad DoS HTTP/2 divulgada e...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Desarrollado por m10sec. Este script detecta automáticamente la versión de Nginx en un servidor remoto y evalúa si es vulnerable a fallos de seguridad conocidos, específicamente: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corrupción de memoria en...

apache_audit_cve-2026-23918

cve-2026-23918 Defensive audit tools for CVE-2026-23918 Apache HTTPD HTTP/2 double-free RCE and four related CVEs disclosed in the May 4, 2026 Apache Software Foundation security advisory. CVE| Severity| Component| Impact| Affected ---|---|---|---|--- CVE-2026-23918| High CVSS 8.8| HTTP/2| Double...

CVE-2023-44487

HTTP2 Rapid Reset Attack: CVE-2023-44487 Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Exploit: Quick exploit to test out rapid reset attack CVE-2023-44487. Note: For education purpose only Table of Contents Installation Usage Installation Clone the...

CVE-2026-86350

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-86350 CVE-2026-86350 Apache Tomcat 9.0.121 - Apache Software Foundation I am @abraxasnull. Loopback lab. The client is CVE-2026-86350-Abraxas-Labs.py. HTTP/2 header mix-up. A regression in the CVE-2026-41293...