CVE-2017-9798

This repository contains a scanner for CVE-2017-9798 (OptionsBleed), which exploits an information leak vulnerability in Apache HTTP Server. The scanner sends multiple HTTP OPTIONS and custom method requests to detect inconsistencies in the 'Allow' header responses.

This repository contains a Python script that scans for vulnerable .htaccess files affected by CVE-2017-9798. It checks for disallowed HTTP methods in <Limit> directives, which could lead to unauthorized access or privilege escalation.

This PoC scans for CVE-2017-9798 (OptionsBleed), a vulnerability in Apache HTTP Server where the 'Allow' header may leak arbitrary memory content. The script sends OPTIONS requests and parses the response for unexpected data in the 'Allow' header.

This repository contains a functional Perl script that exploits CVE-2017-9798 (OptionsBleed) in Apache HTTP Server by sending crafted OPTIONS requests to detect memory leakage in the Allow header. The script checks for irregular separators in the header to confirm vulnerability.

This repository contains a functional Perl script that exploits CVE-2017-9798 (OptionsBleed) in Apache HTTP Server by sending crafted OPTIONS requests to detect memory leaks in the Allow header. The script checks for irregular separators in the header to confirm vulnerability.

This repository contains a Python script that scans for vulnerable .htaccess files affected by CVE-2017-9798. It checks for disallowed HTTP methods within <Limit> directives, which could lead to unauthorized access or privilege escalation.

This Metasploit module scans for the Apache Optionsbleed vulnerability (CVE-2017-9798) by sending OPTIONS requests and analyzing the Allow header for memory leakage or other bugs. It checks for repeated or malformed method lists in the response.

This script tests for the Optionsbleed vulnerability (CVE-2017-9798) by sending OPTIONS requests to a target host and analyzing the 'Allow' header for anomalies such as duplicates, spaces, or corrupted data. It supports multiple URL prefixes and repeated testing to detect inconsistencies.