这是 CVE-2021-31166(“HTTP 协议栈远程代码执行漏洞”)的概念验证代码,该漏洞是 http.sys 中一个释放后使用(use-after-free)解引用漏洞,微软已于 2021 年 5 月发布补丁。
据我所知,它只能触发程序崩溃,请谨慎使用。
Windows Server, version 20H2 (Server Core Installation)
Windows 10 Version 20H2 for ARM64-based Systems
Windows 10 Version 20H2 for 32-bit Systems
Windows 10 Version 20H2 for x64-based Systems
Windows Server, version 2004 (Server Core installation)
Windows 10 Version 2004 for x64-based Systems
Windows 10 Version 2004 for ARM64-based Systems
Windows 10 Version 2004 for 32-bit Systems