CVE-2025-8671 PoC — CVE-2025-8671

Source

https://github.com/moften/CVE-2025-8671-MadeYouReset-HTTP-2-DDoS

Associated Vulnerability

Title:CVE-2025-8671 (CVE-2025-8671)
Description:A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS). By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.

Description

CVE-2025-25063 MadeYouReset HTTP/2 DDoS

Readme

# HTTP/2 DDoS Heuristic Tester  
Pruebas automáticas para detectar heurísticamente la presencia de vulnerabilidades en HTTP/2 asociadas a ataques **DDoS**:  

Desarrollado por **m10sec**.

- **CVE-2023-44487 – Rapid Reset**  
- **CVE-2025-8671 – MadeYouReset**  
- **Comparativa combinada**  

Incluye **menú interactivo**, ejecución vía **CLI**, soporte para **archivos TXT con múltiples targets** y exportación en **JSON/CSV**.  

---

## Instalación

Clona el repositorio y crea un entorno virtual:

```bash
git clone https://github.com/moften/CVE-2025-8671-MadeYouReset-HTTP-2-DDoS
cd CVE-2025-8671-MadeYouReset-HTTP-2-DDoS
python3 -m venv venv
source venv/bin/activate
```
--- 
## Dependencias

```bash
pip install -r requirements.txt
```

---

## Uso
```bash
python3 CVE-2025-25063.py
```

## CLI
```bash
python3 CVE-2025-25063.py https://objetivo.com --mode myr --streams 100 --json
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!