Search Results for "microsoft windows"

This is a proof of concept for CVE-2021-31166 ("HTTP Protocol Stack Remote Code Execution Vulnerability"), a use-after-free dereference in http.sys patched by Microsoft in May 2021. The bug itself happens in http!UlpParseContentCoding where the function has a local LIST_ENTRY and appends an item to it. When it's done, it moves it into the Request structure; but it doesn't NULL out the local list. The issue with that is that an attacker can trigger a code-path that frees every entry of the...

This is a java wrapper around the old commons-http-client.3.1 HTTP client which not developed anymore. The wrapper is using the new HttpClient 4.x and keeps binary compatibility. The intention for developing this wrapper was using Axis 2 for accessing a Microsoft Exchange 2010 server which requires a NTLM2 authentication. Not all methods are implemented, but it works for me. Just remove the old commons-httpclient-3.1.jar and add http-client-3-wrapper to your project.

Forwards non-NTLM HTTP client requests to an NTLM proxy server (ie. Microsoft IAS). Can also forward a local port to a remote machine.