CVE-2014-9016

This exploit demonstrates a denial-of-service (DoS) vulnerability in Drupal < 7.34 by sending specially crafted requests with a large payload to exhaust CPU and memory resources. The PoC uses a valid user login request with an excessively long password field to trigger the vulnerability.

This repository contains a Python script that exploits CVE-2014-9016, a timing attack vulnerability in Drupal 6.* (with phpass module) and 7.* for user enumeration. The script can also attempt a DoS attack by flooding the server with login requests.

This repository contains a functional proof-of-concept exploit for CVE-2014-9016, a denial-of-service vulnerability in WordPress versions prior to 5.0.1. The exploit automates the submission of excessively long passwords to the WordPress login page, causing the service to become unresponsive.