CVE-2016-5699 PoC — Python 注入漏洞

Source

https://github.com/bunseokbot/CVE-2016-5699-poc

Associated Vulnerability

Title:Python 注入漏洞 (CVE-2016-5699)
Description:CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in a URL.

Description

PoC code of CVE-2016-5699 Vulnerability

Readme

# CVE-2016-5699-poc
PoC code of CVE-2016-5699 Vulnerability

poc.py file is url sender to receiver.py

receiver.py is Flask http receive headers testing

Video : https://youtu.be/ugUt5iKpcV4

bunseokbot@UpRoot

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!