moften/cve-2023-44487-http-2-rapid-reset-attackHTTP/2 Rapid Reset Exploit PoC
This repository contains a Proof of Concept (PoC) to demonstrate the exploitation of the vulnerability CVE-2023-44487, also known as HTTP/2 Rapid Reset Attack. This vulnerability affects the HTTP/2 protocol and allows an attacker to overload web servers using streams that are quickly closed via RST_STREAM.
CVE-2023-44487 is a vulnerability in the HTTP/2 protocol that allows an attacker to carry out large-scale distributed denial-of-service (DDoS) attacks. The attack consists of opening multiple streams within a single HTTP/2 connection and then quickly closing them using the RST_STREAM frame, which generates a high processing load on the affected server.
This attack has been observed in real DDoS campaigns and affects web servers, load balancers, and other devices that support HTTP/2.
Warning: This code is for educational and research purposes only. It should not be used against systems without explicit authorization.
h2 (Hyper-h2)hyperframehyperYou can install the dependencies with:
pip install h2 hyperframe hyper
If this tool has been useful to you or you want to support future development, you can buy me a coffee ☕ or make a donation. Any support counts!
I believe in a world where users have control over their privacy. This tool was born from the trenches of real pentesting, with love for digital freedom and hacking with purpose.
⭐ If you liked this project, give it a star on GitHub and share it with your community.