CVE-2015-1635 PoC — Microsoft Windows HTTP.sys 远程执行代码漏洞

Source

https://github.com/NyxByt3/CVE-2015-1635

Associated Vulnerability

Title:Microsoft Windows HTTP.sys 远程执行代码漏洞 (CVE-2015-1635)
Description:HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

Readme

#️⃣ CVE-2015-1635


Requirements:

Python >= 3.6

Install requirements with: 

`pip3 install -r requirements.txt`

Usage example:

`python3 MS15-034.py -u http://targeturl.com/ -c -d`

Args:

![image](https://user-images.githubusercontent.com/66146701/125215566-5ece8100-e268-11eb-81c7-f189d8606649.png)

![image](https://user-images.githubusercontent.com/66146701/125215622-7c034f80-e268-11eb-9a97-235446628fa0.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →