Add files via upload

patch-1
PhillipoTF2 2023-11-28 14:26:36 +00:00 committed by GitHub
parent 91f3f8b3bc
commit 5b9bd0571d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 16 deletions

View File

@ -2,7 +2,7 @@ id: CVE-2015-1635
info:
name: HTTP.sys Remote Code Execution Vulnerability
author: Phillipo
severity: high
severity: critical
description: HTTP.sys in some versions of Microsoft Windows allows remote attackers to execute arbitrary code via crafted HTTP requests.
reference:
- https://www.exploit-db.com/exploits/36773
@ -14,22 +14,15 @@ info:
cve-id: CVE-2015-1635
tags: cve,cve2015,kev,microsoft
http:
- raw:
- |
GET /welcome.png HTTP/1.1
Host: {{Hostname}}
Range: bytes=0-18446744073709551615
- |
GET /robots.txt HTTP/1.1
Host: {{Hostname}}
Range: bytes=0-18446744073709551615
requests:
- method: GET
path:
- "{{BaseURL}}/"
headers:
Range: "bytes=0-18446744073709551615"
matchers-condition: and
matchers:
- type: word
words:
- "Requested Range Not Satisfiable"
- type: status
status:
- 416
- "416"
- "The requested range is not satisfiable"