Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-9784 — Bash script to test for CVE-2025-9784 HTTP/2 DoS vulnerability in Undertow servers. Measures baseline response times, simulates rapid stream resets, and provides a vulnerability assessment report. | Kitploit
Tools/GitHubGitHub/drackyjr/cve-2025-9784
Vulnerability ScannersVulnerability AnalysisWeb SecurityNetwork SecurityPenetration Testing
GitHubdrackyjr/cve-2025-9784

CVE-2025-9784

Bash script to test for CVE-2025-9784 HTTP/2 DoS vulnerability in Undertow servers. Measures baseline response times, simulates rapid stream resets, and provides a vulnerability assessment report.

View Repository
21111 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2025-9784 MadeYouReset HTTP/2 Vulnerability Test

Overview

This repository contains a simple and effective bash script to test for the CVE-2025-9784 vulnerability (known as the "MadeYouReset" HTTP/2 Denial of Service (DoS) attack) in Undertow HTTP/2 server implementations. The vulnerability allows attackers to induce excessive server workload by repeatedly causing server-side stream resets, leading to potential service disruption.

Features

  • Detects if the target server supports HTTP/2 protocol.
  • Measures baseline response times.
  • Simulates rapid concurrent HTTP/2 stream creation to trigger resets.
  • Analyzes server response behaviors under load.
  • Provides a straightforward vulnerability assessment report.

Getting Started

Prerequisites

  • Bash shell (Linux, macOS, WSL)
  • curl with HTTP/2 support
  • Optional: bc for floating-point arithmetic (most Linux distros include this by default)

Usage

  1. Clone or download this repository.
  2. Make the script executable:
chmod +x cve-2025-9784-test.sh
  1. Run the script against a target URL:
./cve-2025-9784-test.sh https://target-website.com

Output

  • The script will output test progress and results, highlighting if any signs of potential vulnerability are detected.
  • It checks the server's HTTP/2 capability, baseline response times, and simulates attack conditions.
  • Final assessment notes if the server might be vulnerable based on response failure and delay patterns.

Important Notes

  • Only test against systems you own or have explicit permission to assess.
  • This script does not exploit the vulnerability but stresses the server to observe response anomalies.
  • The vulnerability affects certain Undertow server implementations primarily found in Red Hat products and other Java-based servers.
  • For more details on the vulnerability, visit the official advisory: Red Hat CVE-2025-9784

Contributing

Contributions, issues, and feature requests are welcome! Feel free to fork the repository and submit pull requests.

Disclaimer

This tool is for educational and authorized security testing purposes only. The author is not responsible for any misuse or damage caused by this script.

Download Tool