Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

OptionsBleed (CVE-2017-9798)

Not sure if its the right section.

I'm hacking a machine called "PickleRick" from tryhackme.com and the apache version used is 2.4.18 which is within the range of the options bleed.

Though what i don't understand about this script is that, what does it do exactly !?

All i get is this:

python3 42745.py -a -u 10.10.12.150

[ok] 10.10.12.150: 'POST,OPTIONS,GET,HEAD'

No info on the site, github has the same but more of those options which i really don't get..

Can someone explain this please! There is nothing about it on youtube.
is there any other output? maybe one that says “[BLEED]”?

the github page for the exploit states this:
“ [ok] = Nothing wrong with this header (only sent with -a/--all).”

I think your server isn’t vulnerable to this exploit, especially if no [BLEED] headers are outputted
(Jun 22, 2022 02:00 AM)wyvn Wrote:  is there any other output? maybe one that says “[BLEED]”?

the github page for the exploit states this:
“ [ok] = Nothing wrong with this header (only sent with -a/--all).”

I think your server isn’t vulnerable to this exploit, especially if no [BLEED] headers are outputted

You're right, i was mentally exhausted yesterday i didn't notice, thank you.


Possibly Related Threads...
Thread / Author Replies Views Last Post
by HelpedyousleepNov 30, 2024 02:24 PM 2 395 Nov 30, 2024 02:24 PM
Last Post: Helpedyousleep
by Max_Troy3Mar 17, 2020 04:06 AM 4 180 Mar 17, 2020 04:06 AM
Last Post: compalabee
by banderas20Oct 15, 2018 03:32 AM 12 780 Oct 15, 2018 03:32 AM
Last Post: banderas20