IIS-ShortName-Scanner

Scanner de noms courts IIS - 2012-2023 & Toujours d'actualité... Dernière présentation : Au-delà de la divulgation des noms de fichiers courts Microsoft IIS Dernier article de blog : https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosur...

CVE-2017-7269

CVE 2017.7269 PoC Index CVE 2017.7269 PoC Index Auteurs Résumé Qu'est-ce que Microsoft IIS ? Qu'est-ce que Microsft Windows server ? Qu'est-ce que WebDAV ? Description Utilisation : Références & Découvreurs Auteurs NoexDevPen - Profil Beacons mag4no10 - Profil Beacons Résumé Qu'est-ce que Microso...

webdav_exploit

webdavexploit Microsoft IIS 6.0 CVE-2017-7269용 익스플로잇 https://github.com/edwardz246003/IISexploit를 기반으로 하지만 원격으로 작동합니다. 사용법 root@kitploit: python exploit.py -d http://www.eliuha.com/eliuha...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS-SITE SCRIPTING Référence : https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Score de base : 6.1 Sévérité : Moyenne Exploit : http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:./...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 Un petit outil pour créer un PoC pour CVE-2000-0649. Utilisation Ce script vérifie si le serveur est vulnérable à CVE-2000-0649. N'oubliez pas d'expérimenter avec HTTP, HTTPS et différents chemins. Selon mon expérience, la divulgation se produit principalement lors de la connexi...

cve-2017-7269-tool

cve-2017-7269 outil webshell et shellcode compilation root@kitploit: csc cve-2017-7269.cs utilisation root@kitploit: CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp pa...

EUVD-1999-1525

Malware in sbrugna...

EUVD-2019-9923

Malware in sbrugna...

EUVD-2007-1275

Malware in sbrugna...

EUVD-2005-0872

Malware in sbrugna...

EUVD-2017-0422

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

EUVD-2006-5842

Malware in sbrugna...

EUVD-2006-6561

Malware in sbrugna...

EUVD-2019-1676

Malware in sbrugna...

PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...

CVE-2020-0645

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...