Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-8671 — PoC éducatif pour la vulnérabilité CVE-2025-8671 (DoS HTTP/2 sur lighttpd). À utiliser uniquement en laboratoire local. | Kitploit
Tools/GitHubGitHub/abiyeenzo/cve-2025-8671
Vulnerability AnalysisExploitationWeb SecurityLearning & EducationLabs & Practice
GitHubabiyeenzo/cve-2025-8671

CVE-2025-8671

PoC éducatif pour la vulnérabilité CVE-2025-8671 (DoS HTTP/2 sur lighttpd). À utiliser uniquement en laboratoire local.

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-8671 - PoC DoS lighttpd HTTP/2

Author : @abiyeenzo

⚠️ Warning

This project is provided for educational purposes only. Running the PoC against third-party servers may constitute an illegal cyberattack and lead to criminal prosecution.

Only use this script on your test environments or local labs.

📌 Description

This script allows you to:

  1. Check if a lighttpd server is vulnerable to the CVE-2025-8671 flaw (HTTP/2 DoS).
  2. Execute a PoC DoS by sending HTTP/2 streams in a controlled manner.

🛠 Features

  • Check the version of lighttpd.
  • Secure local PoC DoS, with:
    • Configurable number of streams (--count).
    • Continuous mode (--continuous) until interruption by Ctrl-C.
  • Colorful console with rich for better readability.

    • ⚙️ Installation

    1. Clone the repository:
    root@kitploit:~
    git clone https://github.com/abiyeenzo/CVE-2025-8671.git
cd CVE-2025-8671
    1. Install the dependencies:
    root@kitploit:~
    pip install -r requirements.txt

    Python 3.10+ recommended.

    🚀 Usage

    Help

    root@kitploit:~
    python3 main.py -h

    Check if the server is vulnerable

    root@kitploit:~
    python3 main.py <host> -t

    Run the PoC (local only)

    root@kitploit:~
    python3 main.py <host> -c

    PoC Options

    • --count <number> : Number of HTTP/2 streams to send (default 20)
    • --continuous : Continuous mode until Ctrl-C

    Example:

    root@kitploit:~
    python3 main.py 127.0.0.1 -c --count 50
python3 main.py 127.0.0.1 -c --continuous

    📝 Disclaimer

    Do not run this script against external servers. It is provided only for learning and personal lab testing. The author disclaims any responsibility for misuse.

    📦 Requirements

    • rich>=13.0.0
    • h2>=4.1.0
    Download Tool