Exploit for HTTPsys

kitploit · 2026-08-25

Description

HTTPsys checker site for MS15-034 / CVE-2015-1635 Windows elevation of privilege.

Entry point

ParameterRange · header

Path/

HTTP.sys integer overflow in Range handling enabling potential RCE (CVE-2015-1635).

Affected software

Microsoft Windows 7 All versions

Microsoft Windows 8 All versions

Microsoft Windows 8.1 All versions

Microsoft Windows Server 2008= R2

All known vulnerabilities by product

Windows Windows 7 Windows 8 Windows 8.1 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2

CVSS 10.0 for CVE-2015-1635

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

100.0%higher than 100.0% of all CVEs

Updated 2026-08-29

Exploit Details

Modified:2026-08-25 07:51

Last Seen:2026-08-26 09:33

Reporter:KitPloit

Tags

HTTPsysMS15-034CVE-2015-1635elevation of privilegeWindowschecker tool

Other exploits for CVE-2015-1635

Project-CVE-2015-1635

2026-08-29 KitPloitKITPLOIT

CVE-2015-1635-POC

2026-08-29 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

CVE-2015-1635-POC

2026-08-28 KitPloitKITPLOIT

Remove-IIS-RIIS

2026-08-28 KitPloitKITPLOIT

CVE-2015-1635_PoC

2026-08-27 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

2026-08-26 KitPloitKITPLOIT

Exploit Code

MARKDOWN6 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-HEDGECORE-HTTPSYS
Eine Prüfseite für MS15-034 / CVE-2015-1635.

Basiert auf @rhcp011235s POC: https://ghostbin.com/paste/semkg

Öffentliche Seite verfügbar unter https://lab.xpaw.me/MS15-034/