Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-44487-dos — PoC for CVE-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept | Kitploit
Tools/GitHubGitHub/tahaxafous/cve-2023-44487-dos
Vulnerability AnalysisExploitationWeb SecurityPenetration Testing
GitHubtahaxafous/cve-2023-44487-dos

CVE-2023-44487-dos

PoC for CVE-2023-44487 ( HTTP/2 Rapid Reset Attack ) Concept

View Repository
181 month agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-44487 (HTTP/2 Rapid Reset)

There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack (starting many streams and immediately sending RST_STREAM frame to avoid reaching MAX_CONCURRENT_STREAMS).

I use H2SpaceX low level HTTP/2 library which I created for exploiting Single Packet Attack

Sending 100000 POST requests (with single packet attack technique) which causes server to wait for last byte, and then sending RESET STREAM frame after each request

This tool also uses threading to open more H2 connections.

just run python CVE-2023-44487-dos-poc.py and the tool will ask you for the host enter it and done dos PoC running

Download Tool