[framework] apache mod_rewrite

Tomas L. Byrnes tomb at byrneit.net
Fri Sep 29 14:25:17 CDT 2006


I know of a few Load Balancers that use it.
 

-----Original Message-----
From: Omen [mailto:omen at mysec.org] 
Sent: Friday, September 29, 2006 12:03 PM
To: framework at metasploit.com
Subject: Re: [framework] apache mod_rewrite

Mostly on our gov office use this for their local network use. I dont
know about others.. maybe you guys wanna say something..

H D Moore wrote:
> Can you think of a case where this exploit is useful? How many people 
> have mod_rewrite and mod_ldap enabled? Any pen-testers want to share 
> stats on the prevalence of this flaw?
>
> -HD
>
> On Friday 29 September 2006 13:38, Omen wrote:
>   
>> Hey guys,
>>
>> Does anyone out there free to write this sploit on 2.6? I believe 
>> theres a PoC at
>> http://milw0rm.com/exploits/2237
>>     




More information about the framework mailing list