Metasploit mailing list archives

apache mod_rewrite


From: tomb at byrneit.net (Tomas L. Byrnes)
Date: Fri, 29 Sep 2006 12:25:17 -0700

I know of a few Load Balancers that use it.
 

-----Original Message-----
From: Omen [mailto:omen at mysec.org] 
Sent: Friday, September 29, 2006 12:03 PM
To: framework at metasploit.com
Subject: Re: [framework] apache mod_rewrite

Mostly on our gov office use this for their local network use. I dont
know about others.. maybe you guys wanna say something..

H D Moore wrote:
Can you think of a case where this exploit is useful? How many people 
have mod_rewrite and mod_ldap enabled? Any pen-testers want to share 
stats on the prevalence of this flaw?

-HD

On Friday 29 September 2006 13:38, Omen wrote:
  
Hey guys,

Does anyone out there free to write this sploit on 2.6? I believe 
theres a PoC at
http://milw0rm.com/exploits/2237
    




Current thread: