CVE-2007-0919

This exploit demonstrates a directory traversal vulnerability in MiniWebSvr 0.0.9a by sending a crafted HTTP GET request to retrieve the boot.ini file. It establishes a socket connection to the target server and sends the malicious request to leak sensitive system files.

This is a functional proof-of-concept for a directory traversal vulnerability in MiniWebsvr 0.0.7. It uses URL-encoded backslashes to traverse directories and access sensitive files like boot.ini or browse the filesystem.