CVE-2019-16278

This exploit leverages a path traversal vulnerability in nostromo 1.9.6 to achieve remote code execution by sending a maliciously crafted HTTP POST request. The payload bypasses input validation to execute arbitrary shell commands via the '.%0d' directory traversal technique.

This Metasploit module exploits CVE-2019-16278, a directory traversal vulnerability in Nostromo web server <= 1.9.6, allowing unauthenticated remote command execution via a crafted HTTP POST request targeting the `http_verify` function.

The repository contains functional exploit scripts for CVE-2019-16278 (RCE via directory traversal) and CVE-2019-16279 (DoS via memory error). The PoC for CVE-2019-16278 sends a crafted HTTP POST request to execute arbitrary commands via `/bin/sh`, while the DoS exploit floods the target with excessive ` ` sequences.

This repository contains a functional Python-based exploit for CVE-2019-16278, a path traversal vulnerability in Nhttpd that allows remote command execution via crafted HTTP requests. The PoC sends a malformed POST request to execute arbitrary commands on the target system.

The repository contains a functional Python script that exploits CVE-2019-16278, a path traversal vulnerability in Nostromo web server leading to unauthenticated remote code execution. The exploit sends a crafted HTTP POST request to traverse directories and execute arbitrary commands via `/bin/sh`.

This repository contains a functional Python exploit for CVE-2019-16278, which targets a remote code execution vulnerability in Nostromo nhttpd <= 1.9.6. The exploit leverages a path traversal flaw in the HTTP request handling to execute arbitrary commands on the server.

This repository contains a functional Python exploit for CVE-2019-16278, a remote code execution vulnerability in Nostromo nhttpd <= 1.9.6. The exploit leverages directory traversal via URL-encoded CRLF characters to execute arbitrary commands via /bin/sh.

This repository contains a functional Python exploit for CVE-2019-16278, a remote command execution vulnerability in Nostromo httpd (nhttpd) 1.9.6. The exploit crafts a malicious HTTP POST request with a payload that bypasses input validation, allowing arbitrary command execution on the target system.

This repository contains a functional exploit for CVE-2019-16278, a directory traversal vulnerability in Nostromo Web Server 1.9.6 that allows remote code execution via a crafted HTTP request. The exploit uses pwntools to send a reverse shell payload to the target.

This repository contains a functional Python exploit for CVE-2019-16278, which targets a directory traversal vulnerability in Nostromo (nhttpd) 1.9.6, leading to remote code execution (RCE). The exploit sends a crafted HTTP POST request to traverse directories and execute arbitrary commands via `/bin/sh`.

This repository contains a functional Python3 exploit for CVE-2019-16278, targeting a path traversal vulnerability in Nostromo web server versions <= 1.9.6. The exploit sends a crafted HTTP POST request to execute arbitrary commands via a traversal sequence (./.%0d./) leading to /bin/sh.

This repository contains a functional Python exploit for CVE-2019-16278, which targets a directory traversal vulnerability in Nostromo (nhttpd) 1.9.6, leading to remote code execution (RCE). The exploit sends a crafted HTTP POST request to traverse directories and execute arbitrary commands via `/bin/sh`.

This repository contains a functional Python exploit for CVE-2019-16278, a remote code execution vulnerability in nostromo 1.9.6. The exploit sends a crafted HTTP POST request with a path traversal payload to execute arbitrary commands on the target system.

This repository contains a functional Python exploit for CVE-2019-16278, targeting Nostromo 1.9.6. The exploit leverages directory traversal to achieve remote code execution by sending a crafted HTTP POST request.

The repository contains a functional Python exploit for CVE-2019-16278, targeting Nostromo 1.9.6. The exploit leverages a path traversal vulnerability to achieve remote code execution (RCE) via a crafted HTTP request.

This repository contains a functional Rust-based exploit for CVE-2019-16278, targeting nhttpd v1.9.6. The exploit sends a maliciously crafted HTTP POST request to trigger remote code execution via a path traversal vulnerability.

This repository contains a functional Python exploit for CVE-2019-16278, which leverages a directory traversal vulnerability in Nostromo nhttpd 1.9.6 to achieve unauthenticated remote code execution via a crafted HTTP POST request.

This repository contains a functional Python exploit for CVE-2019-16278, a path traversal vulnerability in Nostromo web server <= 1.9.6 that allows remote command execution via crafted HTTP requests with %0d bypass.

The repository contains a functional Python exploit for CVE-2019-16278, a remote command execution vulnerability in the Nostromo web server. The exploit constructs a malicious HTTP POST request to execute arbitrary commands via a path traversal and command injection technique.

This repository contains a functional Python exploit for CVE-2019-16278, a remote code execution vulnerability in Nostromo 1.9.6. The exploit leverages a path traversal flaw in the HTTP request handling to execute arbitrary commands via a crafted POST request.

This Metasploit module exploits a directory traversal vulnerability (CVE-2019-16278) in Nostromo <= 1.9.6 to achieve remote command execution via a crafted HTTP POST request targeting `/bin/sh`. It supports both in-memory Unix payloads and Linux droppers for various architectures.