CVE-2004-2271
MiniShare < 1.4.1 - Remote Code Execution via Long HTTP GET Request
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2004-2271.
PoCs published by Metasploit, NoPh0BiA, class101, including Metasploit module exploits/windows/http/minishare_get_overflow.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in Minishare 1.4.1 via a maliciously crafted HTTP GET request. It leverages a 'jmp esp' or 'push esp, ret' instruction to execute arbitrary shellcode, targeting multiple Windows versions.
Description
Buffer overflow in MiniShare 1.4.1 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.
Exploits (8)
This is a Metasploit module exploiting a stack-based buffer overflow in Minishare 1.4.1 via a maliciously crafted HTTP GET request. It leverages a 'jmp esp' or 'push esp, ret' instruction to execute arbitrary shellcode, targeting multiple Windows versions.
This exploit targets a buffer overflow vulnerability in MiniShare 1.4.1, sending a crafted HTTP GET request with shellcode to achieve remote code execution. It establishes a reverse shell on port 4444.
This exploit targets a buffer overflow vulnerability in MiniShare <= 1.4.1 by sending a crafted HTTP GET request with a malicious payload. It binds a shellcode to port 101, providing remote command execution on vulnerable systems.
This repository contains a functional exploit for CVE-2004-2271, a buffer overflow vulnerability in the HTTP request handling of a target software. The exploit includes multiple stages: initial crash, EIP control, bad character identification, and a final reverse shell payload.
This repository contains a functional exploit for CVE-2004-2271, a buffer overflow vulnerability in MiniShare 1.4.1. The exploit uses an egghunter technique to locate shellcode placed in the 'Host' header of an HTTP GET request, bypassing space constraints.
This repository contains a functional exploit for CVE-2004-2271, targeting a buffer overflow vulnerability in MiniShare HTTP server. The exploit includes a fuzzer and a reverse shell payload generator, demonstrating remote code execution via a crafted HTTP GET request.
This repository contains a functional Python exploit for CVE-2004-2271, a buffer overflow vulnerability in MiniShare 1.4.1. The exploit generates a reverse shell payload using msfvenom and targets multiple Windows versions with predefined return addresses.
This is a Metasploit module exploiting a stack-based buffer overflow in Minishare 1.4.1 via a maliciously crafted HTTP request. It leverages a 'jmp esp' or similar instruction to redirect execution to the payload, achieving remote code execution.