+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: OptionsBleed (CVE-2017-9798) (/showthread.php?tid=6210396)
OptionsBleed (CVE-2017-9798) - universecloud - Jun 21, 2022
Not sure if its the right section.
I'm hacking a machine called "PickleRick" from tryhackme.com and the apache version used is 2.4.18 which is within the range of the options bleed.
Though what i don't understand about this script is that, what does it do exactly !?
All i get is this:
python3 42745.py -a -u 10.10.12.150
[ok] 10.10.12.150: 'POST,OPTIONS,GET,HEAD'
No info on the site, github has the same but more of those options which i really don't get..
Can someone explain this please! There is nothing about it on youtube.
RE: OptionsBleed (CVE-2017-9798) - wyvn - Jun 22, 2022
is there any other output? maybe one that says “[BLEED]”?
the github page for the exploit states this:
“ [ok] = Nothing wrong with this header (only sent with -a/--all).”
I think your server isn’t vulnerable to this exploit, especially if no [BLEED] headers are outputted
RE: OptionsBleed (CVE-2017-9798) - universecloud - Jun 22, 2022
(Jun 22, 2022 02:00 AM)0xj4y Wrote: is there any other output? maybe one that says “[BLEED]”?
the github page for the exploit states this:
“ [ok] = Nothing wrong with this header (only sent with -a/--all).”
I think your server isn’t vulnerable to this exploit, especially if no [BLEED] headers are outputted
You're right, i was mentally exhausted yesterday i didn't notice, thank you.