gpiechnik2/nmap-cve-2022-21907Repository containing nse script for vulnerability CVE-2022-21907. It is a component (IIS) vulnerability on Windows. It allows remote code execution.…
edubr2020/realplayer_g2_rceProof-of-concept exploit for a Remote Code Execution vulnerability in RealPlayer G2 ActiveX control, leveraging javascript: and mhtml: URIs to…
0x09al/iis-raidA native backdoor module for Microsoft IIS (Internet Information Services)
d3adzo/shepardIn progress persistent download/upload/execution tool using Windows BITS.
zach115th/toolshellfinderScans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771
justjeff211/conti-ransomware-writeupConducted a full SOC investigation into a Conti ransomware compromise of an Exchange server using Splunk 8.2.2. Analysed 28,145 events across Windows…
saykino/cve-2025-66837Technical documentation and proof-of-concept for CVE-2025-66837, a remote authenticated file upload vulnerability in ARIS allowing arbitrary code…
corelight/cve-2022-22954Zeek package that detects CVE-2022-22954 exploit attempts, logs exploit URIs and attacker response data to aid in incident response and network…
corelight/cve-2021-31166Detection rules (Suricata + Zeek) for CVE-2021-31166 HTTP Protocol Stack vulnerability, providing network-level alerts on exploit attempts against…
verylazytech/cve-2024-4358Authentication Bypass Vulnerability — CVE-2024–4358 — Telerik Report Server 2024
saykino/cve-2025-66838Documentation of CVE-2025-66838: a rate-limiting vulnerability in ARIS file upload API allowing authenticated remote attackers to cause denial of…
caicai1355/cve-2017-7269-exploitIIS 6.0 remote code execution exploit for CVE-2017-7269, supporting custom command payloads up to 8 bytes via WebDAV PROPFIND method.
renzi25031469/cve-2026-49975-http-2-bombDisclosed on June 3, 2026, the "HTTP/2 Bomb" is an unauthenticated remote DoS that combines an HPACK compression bomb with a Slowloris-style hold to…
admin2099/penetration-testing-assessment-23-04-2026Penetration testing assessment of a vulnerable IIS 6.0 WebDAV server, demonstrating reconnaissance, enumeration, exploitation (CVE-2017-7269), and…
holo-routing/holoRust-based routing protocol suite implementing BGP, OSPF, IS-IS, RIP, and VRRP with YANG-modeled configuration, gNMI/gRPC automation, and built-in…
bitquark/shortscanFast IIS short filename enumeration tool that identifies hidden files and directories via tilde vulnerability, with automatic full filename…
vanishedpeople/cve-2017-7269Python proof-of-concept for CVE-2017-7269, a buffer overflow in IIS 6.0 WebDAV, enabling remote code execution on Windows Server 2003 R2.
homjxi0e/cve-2017-7269Exploit for CVE-2017-7269: buffer overflow in IIS 6.0 WebDAV service enabling remote code execution via crafted PROPFIND request.
