iveresk/cve-2022-21907-http.sys iveresk/cve-2022-21907-http.sys

  • Stars
    star
    1
  • Language
    Shell
  • License
    MIT License
  • Created over 2 years ago
  • Updated over 2 years ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
iveresk/cve-2022-21907-http.sys
github

iveresk

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

An unauthenticated attacker can send an HTTP request with an "Accept-Encoding" HTTP request header triggering a double free in the unknown coding-list inside the HTTP Protocol Stack (http.sys) to process packets, resulting in a kernel crash.

More Repositories

1

voip-caller

Simple 5060 port exploit that calls to a receiver device with pre-setuped phrase
Go
30
star
2

camera_dorks

This is Camera Dorks for your default browser by 1vere$k.
Python
15
star
3

cve-2022-26134

Just simple PoC for the Atlassian Jira exploit. Provides code execution for unauthorised user on a server.
Python
11
star
4

CVE-2022-29885

Apache Tomcat DoS (CVE-2022-29885) Exploit
Go
4
star
5

cve-2023-20198

1vere$k POC on the CVE-2023-20198
Python
4
star
6

cve-2022-30525

Initial POC for the CVE-2022-30525
Go
3
star
7

cve-mikrotik-cisco-zoo

Zoo of exploits used in my practise
Makefile
3
star
8

nvd-cve-parser

NVD parser for CVEs, CPEs and CWEs with all known used exploits
Go
2
star
9

cve-2018-19052

PoC for a security: potential path traversal with specific configs, if `mod_dirlisting` were enabled, which is not the default, this would result in listing the contents of the directory above the alias..
Shell
1
star
10

cve-2022-1388-1veresk

Simple shell script for the exploit
Shell
1
star
11

cve-2022-31749

Simple PoC-checker for CVE-2022-31749 by 1vere$k
Shell
1
star
12

CVE-2022-40684

Python
1
star
13

cve-2022-21907

Multithread Golang application
Go
1
star
14

cve-2022-1388-iveresk-command-shell

Improved POC for CVE-2022-1388 that affects multiple F5 products.
Python
1
star
15

cve-2023-40000

That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit.
Shell
1
star
16

CVE-2023-22515

iveresk-CVE-2023-22515
Shell
1
star
17

rtsp_autogrinder3

rtsp_authgrinder3.py - Brute forcing tool for RTSP Protocol. Copyright (C) 2022 re-written for Python3, bugs and logic issues fixed by 1vere$k. All creds go to Luke Stephens and Tek Security Group, LLC
Python
1
star