{"uuid": "1c0ae20d-843d-4da8-b3cc-23af38e11b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5645", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/metasploit_httphandler_dos.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Jose Garduno, Dreamlab Technologies AG\", \"Angelo Seiler, Dreamlab Technologies AG\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the Metasploit HTTP(S) handler by sending\\n          a specially crafted HTTP request that gets added as a resource handler.\\n          Resources (which come from the external connections) are evaluated as RegEx\\n          in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS.\\n\\n          Tested against Metasploit 5.0.20.\", \"disclosure_date\": \"2019-09-04\", \"fullname\": \"auxiliary/dos/http/metasploit_httphandler_dos\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Metasploit HTTP(S) handler DoS\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/http/metasploit_httphandler_dos.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/http/metasploit_httphandler_dos\", \"references\": [\"CVE-2019-5645\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:00.280651Z"}