IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 & Still Giving... Latest presentation: Beyond Microsoft IIS Short File Name Disclosure Latest blog post: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ I recommended everyone to try @bitquark'...

webdav_exploit

webdavexploit An exploit for Microsoft IIS 6.0 CVE-2017-7269 based on https://github.com/edwardz246003/IISexploit but works remotely usage python exploit.py -d http://www.eliuha.com/eliuha...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

CVE-2017-7269

CVE 2017.7269 PoC Index CVE 2017.7269 PoC Index Authors Abstract What is Microsoft IIS? What is Microsft Windows server? What is WebDAV? Description Usage: References & Discoverers Authors NoexDevPen - Beacons Profile mag4no10 - Beacons Profile Abstract What is Microsoft IIS? Internet Information...

cve-2017-7269-tool

cve-2017-7269 webshell and shellcode tool build csc cve-2017-7269.cs usage CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp path of webshell to save ShellCode: -c execu...

CVE-2017-0055-PoC

CVE-2017-0055 PoC MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS SITE SCRIPTING Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 Base Score: 6.1 Severity: Medium Exploit: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 A small tool to create a PoC for CVE-2000-0649. Usage This script verifies if the server is vulnerable for CVE-2000-0649. Keep in mind to play with HTTP, HTTPS and different paths. In my experience, the disclosure is mostly happening when connecting over HTTP and using the defau...

Microsoft IIS HTTP.sys Range RCE (CVE-2015-1635)

Exploits CVE-2015-1635 MS15-034 in HTTP.sys on IIS 8.x: crafted Range headers trigger integer overflow enabling remote code execution or DoS. This module verifies the vulnerable code path and sends the canonical overlapping-range trigger used by public PoCs. !/usr/bin/env python3 -- coding: utf-8...

Microsoft IIS version detect

Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets. !/usr/bin/env python3 -- coding: utf-8 -- """Some Microsoft IIS servers have the version on the response header.""" from kittysploit import from...

EUVD-2006-5842

Malware in sbrugna...

EUVD-2006-6561

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

EUVD-2007-1275

Malware in sbrugna...

EUVD-2019-9923

Malware in sbrugna...

EUVD-2017-0422

Malware in sbrugna...

EUVD-1999-1525

Malware in sbrugna...

EUVD-2005-0872

Malware in sbrugna...

EUVD-2019-1676

Malware in sbrugna...

PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...