Wsgiserver 0.2 Exploit //top\\ -

One of the most documented exploits involving a WSGIServer/0.2 banner relates to . This vulnerability exists in certain built-in development servers (such as those used by older versions of MkDocs) that fail to properly sanitize file paths.

# Craft the malicious HTTP request request = "GET / HTTP/1.1\r\n" request += "Host: vulnerable_server_ip\r\n" request += "Content-Length: " + str(len(payload)) + "\r\n" request += "\r\n" request += payload wsgiserver 0.2 exploit