Nmap Development mailing list archives
NSE script for exploiting BOF in Microsoft's IIS 6.0 and Windows Server 2003
From: Rewanth Cool <ravatheruler4 () gmail com>
Date: Wed, 5 Apr 2017 20:57:12 +0530
I developed an NSE script for the most recently found vulnerability. It exploits the Buffer Overflow vulnerability in Microsoft Internet Information Services (IIS) 6.0 and Microsoft Windows Server 2003. Its marked under CVE-2017-7269 with High Severity and a score of 10.0 in CVSS. The script is crafted carefully and beautifully by separating the shellcode into two parts namely editable portion and non-editable portion. So developers who want to experiment with the shellcode can modify it easily without any doubt. A PR is opened on #828 <https://github.com/nmap/nmap/pull/828> for exploiting the BOF vulnerability i.e CVE 2017-7269. Best regards, Rewanth.
_______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Current thread:
- NSE script for exploiting BOF in Microsoft's IIS 6.0 and Windows Server 2003 Rewanth Cool (Apr 05)