CVE-2021-42697

This exploit triggers a denial of service (DoS) in Akka HTTP by sending a request with a nested header comment payload exceeding the default header limit, causing a stack overflow. It includes a connectivity check followed by the malicious request.

This PoC demonstrates a Denial of Service (DoS) attack against Akka HTTP servers by sending a User-Agent header with deeply nested comments, triggering stack exhaustion. The script first checks target reachability and then sends the malicious payload.