Slowloris-style DoS in Apache HTTP Server via Partial HTTP Requests

This repository is a small, self-contained penetration-test artifact set for the VulnHub SecOS:1 VM rather than a polished standalone exploit framework. It contains 4 files: a README documenting the full attack chain, a CSRF HTML payload, a bash script with the end-to-end command history used during reconnaissance/exploitation/post-exploitation, and a helper script for creating an attacker user on Kali. The primary exploit capability implemented directly in code is the CSRF attack in csrf-exploit.html. That file auto-submits a POST request to http://127.0.0.1:8081/change-password with username=spiderman and password=abc123, relying on a victim browser session on the target host to reset the account password. The exploit-commands.sh file then documents operational follow-on steps: host the lure via Apache as holidays.html, monitor access logs, SSH into 192.168.122.202 as spiderman, enumerate the host with LinPEAS, download and compile the OverlayFS local privilege-escalation exploit (37292.c / CVE-2015-1328), obtain root, read /root/flag.txt, dump sensitive files, inspect MongoDB data, crack hashes, clear logs, create a UID 0 backdoor user, and install a cron-based reverse shell to 192.168.122.186:4444. Repository structure and purpose: - README.md: narrative report of the black-box assessment, target environment, discovered services, vulnerabilities, attack chain, and recommendations. - csrf-exploit.html: actual exploit payload for the CSRF password reset. - exploit-commands.sh: documentation-style shell script containing all commands used across discovery, exploitation, privilege escalation, and persistence. - user-creation.sh: local attacker workstation preparation script. Attack vectors are mixed: web (CSRF against the password-change endpoint), network (SSH access and web enumeration), and local (kernel privilege escalation via OverlayFS). The repository is a real exploit/pentest artifact, not merely a detector. However, it is not highly modular or reusable; most actions are hardcoded to the lab IPs and target account, so OPERATIONAL is the best maturity fit rather than WEAPONIZED.

This repository is the official Metasploit Framework, a comprehensive and modular exploitation platform widely used for penetration testing, vulnerability research, and red teaming. The structure includes configuration files, Ruby application code, data files for exploits (including CVE-specific resources), and auxiliary tools. The framework supports a vast array of exploits, payloads, and auxiliary modules targeting network services, operating systems, and applications. It provides weaponized exploitation capabilities, including remote code execution, privilege escalation, credential harvesting, and post-exploitation modules. The repository contains both the core framework and data files for specific exploits (e.g., CVE-2008-6508, CVE-2010-1240, CVE-2012-0013), as well as configuration files for database and service integration. The main attack vectors are both network-based and local, depending on the selected module. The framework is highly mature and operational, with extensive documentation and support for custom module development.