Skip to content

Instantly share code, notes, and snippets.

View jatan77's full-sized avatar

ninjaj$&$N jatan77

View GitHub Profile
@streaak
streaak / jetleak.py
Created April 2, 2018 18:33
Exploit for Jetleak as seen in https://hackerone.com/reports/143935
import httplib, urllib, ssl, string, sys, getopt
import datetime
from urlparse import urlparse
f = open('jetleak_' + datetime.datetime.now().strftime('%Y%m%d_%H_%M') + '.txt', 'w')
'''
Author: Gotham Digital Science, modified by molejarka
Purpose: This tool is intended to provide a quick-and-dirty way for organizations to test whether
their Jetty web server versions are vulnerable to JetLeak. Currently, this script does