CVE-2017-7269 PoC — Microsoft Internet Information Services 缓冲区错误漏洞

Source

https://github.com/caicai1355/CVE-2017-7269-exploit

Associated Vulnerability

Title: Microsoft Internet Information Services 缓冲区错误漏洞 (CVE-2017-7269)
Description:Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

Description

exec 8 bytes command

Readme

根据 https://github.com/edwardz246003/IIS_exploit.git 修改得来

# 用法
	-h ：选择主机（默认127.0.0.1）
	-p ：选择端口（默认80）
	末尾跟上 command 命令（默认regedit，目前该脚本只支持最多8个字符）

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →