IIS-ShortName-Scanner

IIS Short Name Scanner - 2012-2023 & 여전히 유효함 최신 발표: Microsoft IIS 짧은 파일명 노출을 넘어서 최신 블로그 게시물: https://soroush.me/blog/2023/07/thirteen-years-on-advancing-the-understanding-of-iis-short-file-name-sfn-disclosure/ 모든 분들께 이 오래된 도구를 사용하기 전에 @bitquark의 Go로 작성된 새 도구를 먼저 사용해보시기를 권장합니다:...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

CVE-2017-7269

CVE 2017.7269 PoC 목차 CVE 2017.7269 PoC 목차 저자 개요 Microsoft IIS란? Microsft Windows Server란? WebDAV란? 설명 사용법: 참고 자료 및 발견자 저자 NoexDevPen - Beacons Profile mag4no10 - Beacons Profile 개요 Microsoft IIS란? Internet Information ServicesIIS는 Microsoft에서 제공하는 유연한 범용 웹 서버로, Windows 시스템에서 실행되어 요청된 HTML 페이지나 파일...

webdav_exploit

webdavexploit Microsoft IIS 6.0 CVE-2017-7269 用のエクスプロイト https://github.com/edwardz246003/IISexploit に基づいていますが、リモートで動作します 使い方 python exploit.py -d http://www.eliuha.com/eliuha...

PoC-CVE-2000-0649

PoC-CVE-2000-0649 CVE-2000-0649 の PoC を作成するための小さなツールです。 使用方法 このスクリプトは、サーバーが CVE-2000-0649 に対して脆弱かどうかを検証します。HTTP、HTTPS、さまざまなパスを試すことを忘れないでください。私の経験では、情報漏洩は主に HTTP 接続時、デフォルトパス '/' または '/images' を使用したときに発生します。 ホスト/IP アドレスとポートを指定する必要があります。デフォルトのパスは '/' に設定されています。オプションで、'/' で始まるパスを指定できます。 $ python3...

CVE-2017-0055-PoC

CVE-2017-0055 PoC Microsoft IIS 7.0/7.5/8.0/8.5/10 の /UNCPATH/ クロスサイトスクリプティング 参考: https://nvd.nist.gov/vuln/detail/CVE-2017-0055 基本スコア: 6.1 深刻度: 中 エクスプロイト: http://vulniis/uncpath/%3Cimg%20onerror=alert'xss'%20src=/%3E:/...

cve-2017-7269-tool

cve-2017-7269 웹쉘 및 쉘코드 도구 빌드 csc cve-2017-7269.cs 사용법 CVE-2017-7269 parms Header: -h set host for If header -p set port for If header -s set scheme for If header -l length of physical path WebShell: -w upload webshell to server -wp path of webshell to save ShellCode: -c execute the shellcode Misc...

EUVD-2019-9923

Malware in sbrugna...

EUVD-1999-1525

Malware in sbrugna...

EUVD-2006-1398

Malware in sbrugna...

EUVD-2007-1275

Malware in sbrugna...

EUVD-2006-5842

Malware in sbrugna...

EUVD-2005-0872

Malware in sbrugna...

EUVD-2017-0422

Malware in sbrugna...

EUVD-2019-1676

Malware in sbrugna...

EUVD-2006-6561

Malware in sbrugna...

PT-2025-38499

CVE-2025-10572 - Microsoft IIS Unvalidated Redirect CVE ID : CVE-2025-10572 Published : Sept. 16, 2025, 6:15 p.m. | 43 minutes ago Description : Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-9199. Reason: This candidate is a reservation duplicate of CVE-2025-9199...

Trimble Cityworks 15.x < 15.8.9 / 23.x < 23.10 Deserialization RCE

The version of Trimble Cityworks installed on the remote host is 15.x prior to 15.8.9, or 23.x prior to 23.10. It is, therefore, affected by a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer's Microsoft Internet...

CVE-2020-0645

A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'...

CVE-2019-1365

An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it.An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...