ADMIN EXPLOIT TO ENTIRE BLOCK (e-retailer.kudos.net.nz)

IP
210.48.1.200
e-retailer.kudos.net.nz
TECHNOLOGY USED - Microsoft-IIS/8.5
Microsoft-IIS/8.5 WORKING EXPLOIT
Security Advisory
This security advisory describes one medium risk vulnerability.

1) Inconsistent interpretation of HTTP requests
Risk: Medium

CVSSv3: 5.7 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C] [PCI]

CVE-ID: N/A

CWE-ID: CWE-444 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
Exploit availability: No

Description
The vulnerability allows a remote attacker to perform HTTP request smuggling attack.

The vulnerability exists due to the way that HTTP proxies (front-end) and web servers (back-end) that do not strictly adhere to RFC standards handle sequences of HTTP requests received from multiple sources. A remote attacker can send a specially crafted request to a targeted IIS Server, perform HTTP request smuggling attack and modify responses or retrieve information from another user's HTTP session.


EXPLOITABLE SUBDOMAINS
13  Favicon icon  *.trelisecooperonline.com
14  Favicon icon  accessmobility.co.nz
15  Favicon icon  alanpinkus.com.au
16  Favicon icon  alta.co.nz
17  Favicon icon  amssaddlery.co.nz
18  Favicon icon  andreabianishop.co.nz
19  Favicon icon  andreamooreboutique.com
20  Favicon icon  andreamooreboutique.com.au
21  Favicon icon  apexshoes.com.au
22  Favicon icon  aquaworld.co.nz
23  Favicon icon  australianchoice.com.au
24  Favicon icon  bariano.com.au
25  Favicon icon  beadthemup.com.au
26  Favicon icon  bianitreasurebox.co.nz
27  Favicon icon  bigandtall.co.nz
28  Favicon icon  bigguy.com.au
29  Favicon icon  bigmensclothes.com.au
30  Favicon icon  bigmensclothing.co.nz
31  Favicon icon  botanicalbookshop.com.au
32  Favicon icon  brashop.co.nz
33  Favicon icon  calypsoboutique.co.nz
34  Favicon icon  co-opcollective.com.au
35  Favicon icon  cravehome.co.nz
36  Favicon icon  culinaryvista.com
37  Favicon icon  damask.co.nz
38  Favicon icon  diahannboutique.co.nz
39  Favicon icon  digbysmenswear.com
40  Favicon icon  dotnz.net
41  Favicon icon  dtcarter.co.nz
42  Favicon icon  e-retailer.kudos.net.nz
43  Favicon icon  easysteps.com.au
44  Favicon icon  educationresources.co.nz
45  Favicon icon  furbish.com.au
46  Favicon icon  fusesilver.com.au
47  Favicon icon  fussyfeet.com.au
48  Favicon icon  futurefeet.co.nz
49  Favicon icon  headoverheels.co.nz
50  Favicon icon  herplace.co.nz
51  Favicon icon  hforders.co.nz
52  Favicon icon  hickeys.co.nz
53  Favicon icon  hisplace.co.nz
54  Favicon icon  huntfish.co.nz
55  Favicon icon  hydrosurf.co.nz
56  Favicon icon  iloveparis.co.nz
57  Favicon icon  janedebster.com.au
58  Favicon icon  kathrynwilson.com
59  Favicon icon  kazazzjewellery.com.au
60  Favicon icon  kiltonline.co.nz
61  Favicon icon  kingsizemenswear.co.nz
62  Favicon icon  kudos.co.nz
63  Favicon icon  kudos.net.au
64  Favicon icon  larashouse.com.au
65  Favicon icon  ldap.nzoomail.co.nz
66  Favicon icon  lisaslacies.com.au
67  Favicon icon  livingsimply.co.nz
68  Favicon icon  lotusgold.co.nz
69  Favicon icon  malletts.co.nz
70  Favicon icon  manningshoes.com
71  Favicon icon  mariposaclothing.co.nz
72  Favicon icon  mayyadabazaar.com.au
73  Favicon icon  menashop.com
74  Favicon icon  mikkoshoes.com
75  Favicon icon  mitchellswholesale.com
76  Favicon icon  mitchellswholesale.com.au
77  Favicon icon  mx1.nzoomail.co.nz
78  Favicon icon  mx2.nzoomail.co.nz
79  Favicon icon  myjujudancefever.com.au
80  Favicon icon  new.bar8606.e-retailer.co.nz
81  Favicon icon  nlb.kudos.net.nz
82  Favicon icon  nzoomail.co.nz
83  Favicon icon  patmenzieshoes.co.nz
84  Favicon icon  preen.co.nz
85  Favicon icon  raptonline.co.nz
86  Favicon icon  repertoire.co.nz
87  Favicon icon  roadhouse.net.au
88  Favicon icon  rodandreel.co.nz
89  Favicon icon  runwayshoes.co.nz
90  Favicon icon  scarpa.co.nz
91  Favicon icon  scottiecrafts.co.nz
92  Favicon icon  shescience.com.au
93  Favicon icon  shoesandsox.com.au
94  Favicon icon  shop.co-opcollective.com
95  Favicon icon  shop.rubynz.com
96  Favicon icon  sills-and-co.com
97  Favicon icon  sparrows.co.nz
98  Favicon icon  sportspowernowra.com.au
99  Favicon icon  stompkidsshoes.co.nz
100  Favicon icon  thepetcentre.co.nz
101  Favicon icon  thesportshop.co.nz
102  Favicon icon  thevaultnz.com
103  Favicon icon  thomass.co.nz
104  Favicon icon  tommygun.nz
105  Favicon icon  topshelfliquor.co.nz
106  Favicon icon  uggking.com.au
107  Favicon icon  ula.co.nz
108  Favicon icon  urbancollectivefw.com.au
109  Favicon icon  vialamoda.com.au
110  Favicon icon  vigorella.com.au
111  Favicon icon  weloveshoes.co.nz
112  Favicon icon  wildspiritnz.co.nz
113  Favicon icon  workwearandsafety.co.nz
114  Favicon icon  www.alanpinkus.com.au
115  Favicon icon  www.amssaddlery.co.nz
116  Favicon icon  www.andreabianishop.co.nz
117  Favicon icon  www.andreamooreboutique.com
118  Favicon icon  www.apexshoes.com.au
119  Favicon icon  www.aquaworld.co.nz
120  Favicon icon  www.australianchoice.com.au
121  Favicon icon  www.bariano.com.au
122  Favicon icon  www.beadthemup.com.au
123  Favicon icon  www.bianitreasurebox.co.nz
124  Favicon icon  www.bigandtall.co.nz
125  Favicon icon  www.bigguy.com.au
126  Favicon icon  www.bigmensclothing.co.nz
127  Favicon icon  www.boneyard.co.nz
128  Favicon icon  www.digbysmenswear.com
129  Favicon icon  www.easysteps.com.au
130  Favicon icon  www.educationresources.co.nz
131  Favicon icon  www.fussyfeet.com.au
132  Favicon icon  www.futurefeet.co.nz
133  Favicon icon  www.hforders.co.nz
134  Favicon icon  www.hickeys.co.nz
135  Favicon icon  www.hydrosurf.co.nz
136  Favicon icon  www.janedebster.com.au
137  Favicon icon  www.kiltonline.co.nz
138  Favicon icon  www.kingsize.com.au
139  Favicon icon  www.kudos.co.nz
140  Favicon icon  www.kudos.net.au
141  Favicon icon  www.larashouse.com.au
142  Favicon icon  www.lisaslacies.com.au
143  Favicon icon  www.manningshoes.com
144  Favicon icon  www.menashop.com
145  Favicon icon  www.midfordschoolshoes.com.au
146  Favicon icon  www.mikkoshoes.com
147  Favicon icon  www.mitchellswholesale.com
148  Favicon icon  www.parnellbabyboutique.co.nz
149  Favicon icon  www.patmenzieshoes.co.nz
150  Favicon icon  www.pinkincshoes.com.au
151  Favicon icon  www.preen.co.nz
152  Favicon icon  www.raptonline.co.nz
153  Favicon icon  www.roadhouse.net.au
154  Favicon icon  www.rodandreel.co.nz
155  Favicon icon  www.scottiecrafts.co.nz
156  Favicon icon  www.shescience.com.au
157  Favicon icon  www.shoesandsox.com.au
158  Favicon icon  www.sportspowerbundaberg.com.au
159  Favicon icon  www.sportspowernowra.com.au
160  Favicon icon  www.sportstown.com.au
161  Favicon icon  www.thesportshop.co.nz
162  Favicon icon  www.thevaultnz.com
163  Favicon icon  www.thomass.co.nz
164  Favicon icon  www.trafficfootwear.com.au
165  Favicon icon  www.trelisecooperonline.com
166  Favicon icon  www.uggking.com.au
167  Favicon icon  www.vialamoda.com.au
168  Favicon icon  www.vigorella.com.au
169  Favicon icon  www.wildspiritnz.co.nz
170  Favicon icon  www.workwearandsafety.co.nz