NSE script for exploiting BOF in Microsoft's IIS 6.0 and Windows Server 2003

Rewanth Cool <[email protected]>
Newsgroups gmane.comp.security.nmap.devel
Message-ID <CAF-KJUKHHKOyu3buredv9bqzVa4rb276XSYat7NWJ5s4BKD0fw@mail.gmail.com>
I developed an NSE script for the most recently found vulnerability.

It exploits the Buffer Overflow vulnerability in Microsoft Internet
Information Services (IIS) 6.0 and Microsoft Windows Server 2003.

Its marked under CVE-2017-7269 with High Severity and a score of 10.0 in
CVSS.

The script is crafted carefully and beautifully by separating the shellcode
into two parts namely editable portion and non-editable portion. So
developers who want to experiment with the shellcode can modify it easily
without any doubt.

A PR is opened on #828 <https://github.com/nmap/nmap/pull/828> for
exploiting the BOF vulnerability i.e CVE 2017-7269.

Best regards,
Rewanth.

_______________________________________________
Sent through the dev mailing list
https://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.