38 matches found
MadeYouReset_Tester
MadeYouReset Checker ไธไธช่ฝป้็บง Python ่ๆฌ๏ผ็จไบๆฃๆต Web ๆๅกๅจๆฏๅฆๅฏ่ฝๅๅฐ MadeYouReset HTTP/2 ๆ็ปๆๅกๆผๆด็ๅฝฑๅโโ่ฏฅๆผๆด็ผๅทไธบ CVE-2025-8671 ๏ผCVSS 7.5 ้ซๅฑ๏ผใ ่ๆฏ MadeYouReset ๆฏ 2025 ๅนด 8 ๆ็ฑ็นๆ็ปดๅคซๅคงๅญฆๅ Imperva ็็ ็ฉถไบบๅๆซ้ฒ็ไธไธช HTTP/2 DoS ๆผๆดใๅฎๅฉ็จไบ่ฎธๅคไธปๆตๆๅกๅจๅฎ็ฐไธญ HTTP/2 ๆต่ฎกๆฐไธๅ ้จๅ็ซฏๅค็ไน้ด็ไธไธ่ดใ ่ฏฅๆปๅปไผๅ้ๅปๆๆ้ ็็ธๅฝข HTTP/2 ๆงๅถๅธง๏ผไพๅฆ increment=0 ็ WINDOWUPDATE ๅธง๏ผๆ นๆฎ RFC...
CVE-2026-23918
CVE-2026-23918๏ผApache HTTP/2 ๅ้้ๆพ DoS CVE-2026-23918 | Apache HTTP Server 2.4.66 | CWE-415๏ผๅ้้ๆพ | CVSS 8.8 | ๅทฒๅจ 2.4.67 ไธญไฟฎๅค modhttp2๏ผh2mplx.c๏ผไธญ็ๅ้้ๆพๆผๆดๅ ่ฎธ่ฟ็จๆปๅป่ ้่ฟๅฟซ้็ RSTSTREAM ๅธง่งฆๅ c1c2streamjoined ไธ mstreamcleanup ไน้ด็็ซไบๆกไปถ๏ผไป่ๅฏผ่ดๆ็ปๆๅก๏ผๅทฅไฝ่ฟ็จๅดฉๆบ๏ผใ ๅฟซ้ๅผๅง root@kitploit: 1. Start the lab docker-compose up --buil...
golang-CVE-2023-44487
Golang CVE-2023-44487 ๆต่ฏ ๆญคไปๅบๅ ๅซ้ๅฏน CVE-2023-44487 ็ๆต่ฏ่ตๆบๅ็ปๆใ ๅฎไฝฟ็จไฟฎๆน็็ https://github.com/secengjeff/rapidresetclient ๆฅ้ๅฏนๅ็ง Golang ๆๅกๅจ้ ็ฝฎ่ฟ่กๆต่ฏใ ้ๅฏนๆฎ้ๆๅกๅจ่ฟ่กๆต่ฏ root@kitploit: go run server.go go run attacker.go -requests 500000 ็ปๆ go 1.21.0 root@kitploit: 350% CPU load --- Summary --- Frames sent: HEADERS =...
CVE-2026-23918-Apache-H2-PoC
CVE-2026-23918-Apache-H2-PoC ่ฟๆฏ้ๅฏน Apache modhttp2 ไธญๅ้้ๆพๆผๆด๏ผCVE-2026-23918๏ผ็ๆฆๅฟต้ช่ฏๅฉ็จ็จๅบใ่ฟๆฏไธไธชๆฃๆ็ๆผๆด๏ผๅฝฑๅ h2mplx.c ไธญ็ๆตๆธ ็่ทฏๅพใ ๅบๆฌไธ๏ผๅฆๆๆถๆบๆๆกๅพๅฝ๏ผไฝ ๅฏไปฅ่ฎฉๆๅกๅจๅฐ่ฏๆธ ็ๅไธๆกๆตไธคๆฌก๏ผ่ฟ้ๅธธไผๅฏผ่ด SIGSEGV ๅๅทฅไฝ่ฟ็จๅดฉๆบใ ๆณๅพๅฃฐๆ ๅซ็ฏๅปใไป ้ๆๆๆต่ฏไฝฟ็จใๅฆๆไฝ ๆๅฎ็จๅจไฝ ไธๆฅๆ็ไธ่ฅฟไธ๏ผๅๆ่ช่ดใๆๅฏนไฝ ็่กไธบไธๆฟๆ ไปปไฝ่ดฃไปปใ ๅ็ไบไปไน๏ผ CVE-2026-23918 ๅฝฑๅ Apache 2.4.66ใๅฎๅทฒไบๆฌๆๆฉไบๆถๅ๏ผ2026 ๅนด 5 ๆ๏ผๅจ 2.4.67 ไธญไฟฎๅคใ ...
CVE-2025-8671-vulnerability-POC-
CVE-2025-8671-vulnerability-POC- CVE-2025-8671 vulnerability POC CVE-2025-8671 Vulnerability Scanner A professional security research tool for detecting the MadeYouReset vulnerability CVE-2025-8671 in HTTP/2 servers. This scanner uses multiple detection heuristics to identify servers vulnerable t...
CVE-2023-44487
Rapid Reset Client Rapid Reset Client ๆฏไธๆฌพ็จไบๆต่ฏ้ๅฏน CVE-2023-44487๏ผๅฟซ้้็ฝฎ DDoS ๆปๅปๅ้๏ผ็็ผ่งฃๆชๆฝๅๆด้ฒ็จๅบฆ็ๅทฅๅ ทใๅฎๅฎ็ฐไบไธไธชๆๅฐ็ HTTP/2 ๅฎขๆท็ซฏ๏ผ่ฏฅๅฎขๆท็ซฏๆๅผๅไธช TCP ๅฅๆฅๅญ๏ผๅๅ TLS๏ผๅฟฝ็ฅ่ฏไนฆ๏ผๅนถไบคๆข SETTINGS ๅธงใ็ถๅ๏ผๅฎขๆท็ซฏๅ้ๅฟซ้็ HEADERS ๅธง๏ผ้ๅๅ้ RSTSTREAM ๅธงใๅๅง้ ็ฝฎๅ๏ผๅฎ็ๆง๏ผไฝไธๅค็๏ผๆฅ่ชๆๅกๅจ็ๅธง๏ผๅนถๅฐๅ ถ่พๅบๅฐๆ ๅ่พๅบใ ๅบไบๆผๆด CVE-2023-44487 ็่ๆฌไฟฎๆน ๆไพไบไธบ Windows ็ผ่ฏ็่ๆฌ cve.bat๏ผไปฅๅไธบๅจๅ ถไป็ณป็ปไธ้่ฟ...
CVE-2026-23918-test
CVE-2026-23918-test ๆฌไปๅบๅ ๅซไธไธชๆฆๅฟต้ช่ฏ๏ผPoC๏ผ๏ผ็จไบๆผ็คบ Apache HTTP Server 2.4.66 modhttp2 ไธญ็ๅ้้ๆพ๏ผDouble Free๏ผๆผๆด๏ผCVE-2026-23918๏ผใ ่ฏฅๆผๆดๆบไบๆฉๆ RSTSTREAM ๅธงๅค็่ฟ็จไธญ็็ซๆๆกไปถใๆไธๆณจไบไผ่ฏๅค็ๅจๅๅ็ซฏๅทฅไฝ็บฟ็จๅๆถๅฐ่ฏๆธ ้คๆตๅ ๅญๆฑ ็ๆถ้ด็ชๅฃ๏ผๅฏผ่ด APR ๅ้ ๅจไธญๅ็ๅ้้ๆพใ ๅฝๅ่ฟๅฑ ๅดฉๆบ่งฆๅ๏ผๅทฒๅจๆฌๅฐๆๅ่งฆๅ็ซๆๆกไปถใApache ๅญ่ฟ็จไปฅๆฎต้่ฏฏ๏ผSegmentation fault๏ผไฟกๅท 11๏ผ็ปๆญขใ ๆ็ปๆๅก็ถๆ๏ผๅจๆญค้ถๆฎต๏ผPoC...
cve-2023-44487-demo
โก Demo de CVE-2023-44487 โ Ataque de Restablecimiento Rรกpido HTTP/2 Este proyecto demuestra la vulnerabilidad HTTP/2 "Restablecimiento Rรกpido" CVE-2023-44487 que permite a los atacantes abrumar servidores utilizando tramas RSTSTREAM, causando denegaciรณn de servicio DoS. Incluye: โ Prueba de explo...
rapidresetclient
Rapid Reset Client Rapid Reset Client ๆฏไธไธช็จไบๆต่ฏ้ๅฏน CVE-2023-44487๏ผRapid Reset DDoS ๆปๅปๅ้๏ผ็ผ่งฃๆชๆฝไธๅๅฝฑๅ็จๅบฆ็ๅทฅๅ ทใๅฎๅฎ็ฐไบไธไธชๆๅฐๅ็ HTTP/2 ๅฎขๆท็ซฏ๏ผๆๅผๅไธช TCP ๅฅๆฅๅญ๏ผๅๅ TLS๏ผๅฟฝ็ฅ่ฏไนฆ๏ผไบคๆข SETTINGS ๅธงใ็ถๅ๏ผๅฎขๆท็ซฏๅ้ๅฟซ้็ HEADERS ๅธง๏ผๅ่ท RSTSTREAM ๅธงใๅๅงๅๅ๏ผๅฎไผ็ๆต๏ผไฝไธๅค็๏ผๆๅกๅจๅธง๏ผ้คไบ่พๅบๅฐๆ ๅ่พๅบๅคใๅฆๆ่ฟไบ่พๅบ่ฟไบ็ฆไบบ๏ผๅฏไปฅ่ฝปๆพๅฐไปๆบ็ ไธญ็งป้คใ ๅ ๅณๆกไปถ Go ๅจ arm64 ๆถๆ็ go1.21.3 ไธๆต่ฏ้่ฟใ ๅฎ่ฃ ๅ ้ไปๅบ...
cve-2023-44487
CVE-2023-44487 HTTP/2 Restablecimiento Rรกpido Hay algunos ejemplos en este repositorio que no se han probado completamente para analizar el impacto, pero solo querรญa realizar el concepto de este ataque starting many streams and immediately sending RSTSTREAM frame to avoid reaching...
http2-rst-stream-attacker
CVE-2023-44487 ๅ http2-rst-stream-attacker CVE-2023-44487 CVE-2023-44487 ๆฏๅฉ็จ HTTP2 ๅ่ฎฎๆฌ่บซ็ๆผๆดใๅจ HTTP2 ไธญ๏ผๆฐๆฎ่ฏทๆฑ้่ฟๅ้ HEADERS ๅธงๅ่ตทใๆๅกๅจๆถๅฐ่ฏฅๅธงๅ๏ผไผๅผๅงๅค็ไฝ ็่ฏทๆฑ๏ผ้ๅๅ้ DATA ๅธง็ดๅฐๆๆๆฐๆฎไผ ่พๅฎๆฏใHTTP2 ่ฟๅฎไนไบ RSTSTREAM ๅธง๏ผๅฏ็จไบๅจไปปไฝๆถๅปๅ ณ้ญไธไธชๆตใไธบ้ฒๆญขๆปๅป๏ผๆๅกๅจ้ๅธธ้ๅถๅนถๅๆๅผ็ๆๅคงๆตๆฐ้๏ผ้ป่ฎคไธบ 100๏ผใๅฆๆๅฎขๆท็ซฏๅฎ้ ็ญๅพ ๆๆ่ตๆบๆถ่ๅฎๆฏ๏ผ่ฟไธช้ๅถๅพๅฐ่ขซ่งฆๅใ่ฏฅๆปๅปไนๆไปฅๅฅๆ๏ผๅๅ ๅพ็ฎๅ๏ผๅฎขๆท็ซฏๅฏไปฅๅจ ไปปไฝ ๆถๅปๅ้...
CVE-2026-23918-poc
CVE-2026-23918 โ Apache modhttp2 ๅ้้ๆพ ๅฝฑๅ: Apache HTTP Server 2.4.66 ๆญ้ modhttp2 + Event MPM ไฟฎๅค็ๆฌ: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 ้ซ โ ๅฏ่ฝๅฎ็ฐๆช่ฎค่ฏ็่ฟ็จไปฃ็ ๆง่ก CWE: CWE-415 ๅ้้ๆพ ๆผๆดๆ่ฟฐ Apache 2.4.66 ไธญ็ modhttp2 ๅจ h2mplx.c:mstreamcleanup ๅฝๆฐไธญๅญๅจไธไธชๅ้้ๆพๆผๆดใๅฝๅฎขๆท็ซฏๅจๅไธๆตไธๅ ๅ้ HEADERS ๅธง็ดงๆฅ็ๅ้ RSTSTREAM...
CVE-2023-44487-dos
CVE-2023-44487 HTTP/2 Rapid Reset ่ฟไธชไปๅบ้ๆไธไบไพๅญๅนถๆชๅฎๅ จๆต่ฏไปฅๅๆๅฝฑๅ๏ผไฝๆๅชๆฏๆณ่ฆๆผ็คบ่ฟ็งๆปๅป็ๆฆๅฟต๏ผๅฏๅจๅคง้ๆตๅนถ็ซๅณๅ้RSTSTREAMๅธงไปฅ้ฟๅ ่พพๅฐMAXCONCURRENTSTREAMS๏ผใ ๆไฝฟ็จH2SpaceXไฝ็บงHTTP/2ๅบ๏ผ่ฟๆฏๆไธบๅฉ็จๅๅ ๆปๅป่ๅๅปบ็ใ ๅ้100000ไธชPOST่ฏทๆฑ๏ผไฝฟ็จๅๅ ๆปๅปๆๆฏ๏ผ๏ผๅฏผ่ดๆๅกๅจ็ญๅพ ๆๅไธไธชๅญ่๏ผ็ถๅๅจๆฏไธช่ฏทๆฑๅๅ้RESET STREAMๅธงใ ่ฏฅๅทฅๅ ท่ฟไฝฟ็จ็บฟ็จๆฅๆๅผๆดๅค็H2่ฟๆฅใ ๅช้่ฟ่ก python...
CVE-2023-44487-HTTP-2-Rapid-Reset-Exploit-PoC
CVE-2023-44487 - HTTP/2 ๅฟซ้้็ฝฎๆฃๆตๅจ PoC ๆ่ฟฐ ๆญคๅทฅๅ ทๆฏ CVE-2023-44487 ๏ผๅ็งฐ HTTP/2 ๅฟซ้้็ฝฎๆปๅป ๏ผ็ๆฆๅฟต้ช่ฏ๏ผPoC๏ผ็จๅบใ่ฏฅๆผๆดๅ ่ฎธๆปๅป่ ้่ฟ HTTP/2 ่ฟๆฅๅฟซ้ๅ้ RSTSTREAM ๅธงๆฅๆง่กๆ็ปๆๅก๏ผDoS๏ผๆปๅป๏ผไป่ไฝฟ็ฎๆ ๆๅกๅจไธๅ ช้่ดใ ๅ่ฝ็นๆง ๅ URL ๆต่ฏ ๏ผๆต่ฏๅไธช URL ๆฏๅฆๅญๅจๆผๆดใ ๆน้ URL ๆต่ฏ ๏ผๆต่ฏๆไปถไธญๆไพ็ๅคไธช URLใ HTTP ไธ HTTPS ๆฏๆ ๏ผๅๆถๆฏๆ HTTP ๅ HTTPS ๅ่ฎฎใ ่ชๅฎไน็ซฏๅฃ้ๆฉ ๏ผไธบๆต่ฏๆๅฎ่ชๅฎไน็ซฏๅฃใ ่พๅบ้้กน ๏ผ็ปๆๅฏไฟๅญไธบ CSVใTXT ๆ...
CVE-2023-44487-HTTP-2-Rapid-Reset-Attack
PoC - CVE-2023-44487: HTTP/2 Rapid Reset Attack Este repositorio contiene un Proof of Concept PoC para demostrar la explotaciรณn de la vulnerabilidad CVE-2023-44487 , tambiรฉn conocida como HTTP/2 Rapid Reset Attack. Esta vulnerabilidad afecta al protocolo HTTP/2 y permite a un atacante sobrecargar...
cve-2023-44487-POC
cve-2023-44487 - attacco di reset rapido HTTP/2 di 7pirqte che cos'รจ POC per l'attacco di reset rapido HTTP/2. In pratica apri uno stream con frame HEADERS e poi invii subito RSTSTREAM per annullarlo. Il server fa tutto il lavoro di configurazione e smantellamento degli stream mentre tu ti limiti...
Exploit for Double Free in Apache Http_Server
CVE-2026-23918 CVE-2026-23918: Apache HTTP/2 Double...
EUVD-2022-2151
Malicious code in bioql PyPI...