lcfpadilha/mac0352-ep4

PoC

Apache HTTP Server 2.4.23 vulnerability study (CVE-2016-8740)

view exploit source poc_in_githubauthor lcfpadilhapublished 2017-10-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-8740US	high7.5	79.1% (100th)	Exploit	2016-12-05
The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows rem…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.