Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-15605 PoC — Joyent Node.js 环境问题漏洞

Source
https://github.com/jlcarruda/node-poc-http-smuggling
Associated Vulnerability
Title:Joyent Node.js 环境问题漏洞 (CVE-2019-15605)
Description:HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed
Description
PoC of Backend HTTP Socket Poisoning, via HTTP Smuggling, presented in CVE-2019-15605
File Snapshot

 [4.0K]  /data/pocs/3b25334afbb13ac998b32b06e59aa04fe13ab2d9
├── [4.0K]  auth_strategies
│   └── [ 292]  session.js
├── [4.0K]  client
│   └── [   0]  fake_auth.js
├── [ 659]  package.json
├── [ 54K]  package-lock.json
├── [4.0K]  poc
│   └── [ 662]  request.js
├── [4.0K]  server
│   └── [1.2K]  app.js
└── [ 608]  smuggled_test.js

4 directories, 7 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →