jlinebau/cve-2025-55315-scanner-monitorQuick and Simple Scripts to Scan for Vulnerable Servers and Packet Level Monitors
This repository contains tools to detect and monitor ASP.NET Core applications vulnerable to CVE-2025-55315, which involves HTTP request smuggling due to conflicting HTTP headers.
CVE-2025-55315_check.py)Scans a list of URLs and checks the Server HTTP header for known vulnerable ASP.NET Core versions.
pip install requests
python CVE-2025-55315_check.py
tls_proxy_cve_monitor.goActs as a TLS proxy to inspect decrypted HTTPS traffic for conflicting Content-Length and Transfer-Encoding: chunked headers.
Generate a self-signed TLS certificate:
openssl req -x509 -newkey rsa:4096 -keyout server.key -out server.crt -days 365 -nodes
sudo go run tls_proxy_cve_monitor.go
aspnet_vulnerability_scan_results.jsonThese tools are for educational and authorized security testing purposes only. Do not use them on systems without explicit permission.