IngressNightmare-RCE-POC

⚠️ Kritische RCE in Ingress-NGINX durch Konfigurationsinjektion CVE-2025-1974 und weitere Dieses Repository enthält einen Proof-of-Concept PoC Exploit für CVE-2025-1974 , eine kritische CVSS 9.8 Schwachstelle im Ingress-NGINX-Controller für Kubernetes. Dieser Fehler ermöglicht nicht...

CVE-2026-3288

CVE-2026-3288: Injection di configurazione in ingress-nginx tramite annotazione rewrite-target Parole chiave: CVE-2026-3288, vulnerabilità di ingress-nginx, sicurezza Kubernetes, injection di configurazione nginx, annotazione rewrite-target, RCE, divulgazione di Secret, CWE-20, CAPEC-176, CVE 202...

CVE-2025-1974-poc

POC of IngressNightmare, RCE in Ingress NGINX CVE-2025-1974 Developed from: https://github.com/zwxxb/CVE-2025-1974/blob/main/poc.py https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilitieshow-did-we-discover-ingressnightmare-24 Thanks Istruzioni per l'uso root@kitploit: forward the...

authelia

!OpenSSF Best...

tunnelx

TunnelX TunnelX ist ein leichtgewichtiges Ingress-Tunnel-Tool, das dazu dient, einen sicheren SOCKS5-Proxy-Server für die Weiterleitung von Netzwerkverkehr zu erstellen. TunnelX wurde entwickelt, um interne Netzwerkscans von der ProjectDiscovery-Plattform aus zu ermöglichen und eine nahtlose und...

CVE-2023-5044

CVE-2023-5044 CVE 2023 5044 के लिए PoC पूर्वापेक्षाएँ Kind: v0.20.0 Kubectl: v1.29.3 Docker: v26.0.0 PoC Docker को सही विशेषाधिकार दें root@kitploit: sudo usermod -aG docker $USER && newgrp docker क्लस्टर को extraPortMaping और node-labels के साथ प्रारंभ करें ताकि इसे ingress के लिए तैयार किया जा...

cve-2025-24514

🔥 PoC de Verificação da Vulnerabilidade Remota CVE-2025-24514 Este script é um PoC baseado em Python que permite verificar remotamente a vulnerabilidade CVE-2025-24514 manipulação da configuração do NGINX por meio da injeção de auth-url no ingress-nginx e possibilidade de RCE. 🧠 Visão Geral da...

IngressNightterror

IngressNightterror CVE-2025-1974 Panoramica Questo repository contiene la mia ricerca sulla vulnerabilità IngressNightmare. Include file di deploy Ingress vulnerabili, l'exploit stesso e un payload di oggetto condiviso. CVE Elenco degli indici CVE: CVE-2025-1974 - Vulnerabilità principale...

ingressNightmare-CVE-2025-1974-exps

Ingress Nightmare CVE-2025-1907 Beschreibung Diese Sicherheitslücke ermöglicht es entfernten Angreifern, beliebigen Code auf betroffenen Installationen von kubernetes/ingress-nginx auszuführen. Zur Ausnutzung dieser Sicherheitslücke ist keine Authentifizierung erforderlich. Der spezifische Fehler...

CVE-2020-8554

Kubernetes-Cluster erstellen root@kitploit: kind create cluster --config ./kind.yaml Das Cluster muss certmanager haben: https://cert-manager.io/docs/installation/kubernetes/ Schwachstelle testen root@kitploit: kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mitm...

CVE-2025-1974

Exploit per Ingress NGINX - IngressNightmare Questo progetto fornisce un exploit mirato a vulnerabilità critiche di esecuzione remota di codice RCE non autenticata nel controller Ingress NGINX per Kubernetes, note collettivamente come IngressNightmare. Nella ricerca originale, il team di Wiz non ...

CVE-2025-1974

CVE-2025-1974: Analisi della vulnerabilità di Kubernetes Ingress Nginx Controller e configurazione dell'ambiente PoC Ambiente di test MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Configurazione dell'ambiente di test locale M2 MacOS Per il test locale install...

CVE-2025-1974

cve-2025-1974-win11-attack-defense-lab Repository didattico pensato principalmente per Windows 11 per lo studio di CVE-2025-1974 in un laboratorio ATTACK + DEFENSE sicuro e non weaponizzato. Il progetto è progettato per corsi universitari, demo di gruppo e screenshot pronti per i report. Enfatizz...

CVE-2025-1974

README बातें सस्ती हैं, बस कोड देखो। विस्तृत विवरण https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities पर पाया जा सकता है। उपयोग 1. shell.c में IP बदलें। 2. जाँच करें कि डॉकर उपलब्ध है और make shell.so चलाएँ। हमें इसे alpine में बनाना होगा ताकि यह nginx-ingress-controller में काम कर...

Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation

A security issue was discovered in ingress-nginx https-//github.com/kubernetes/ingress-nginx where the auth-url Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets...

CVE-2025-1974

CVE-2025-1974 3ª turma da Whitehat School - Kim So-eun @salt318 https://github.com/salt318/vulhub Resumo Causado por uma falha no Ingress-NGINX Admission Controller, um mecanismo de segurança central do Kubernetes. O Ingress-NGINX Admission Controller está exposto na rede sem autenticação. Isso...

ingress-nightmare

IngressNightmare CVE-2025-1974 यह Python स्क्रिप्ट आपको यह समझने में मदद कर सकती है कि क्या आप Ingress NGINX Controller चला रहे हैं, और यदि हाँ, तो क्या यह किसी ज्ञात कमजोर संस्करण का उपयोग कर रहा है। उपयोग सबसे पहले, uv को यहाँ से इंस्टॉल करना सुनिश्चित करें और फिर ऑडिट करने के लिए Kubernetes...

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — scanner difensivo Le organizzazioni che eseguono NGINX Open Source , NGINX Plus o ingress/controller basati su NGINX dovrebbero verificare se sono interessate da CVE-2026-42945 e applicare la patch o riconfigurare prima che i tentativi di sfruttamento raggiungano i...

IngressNightmare-PoC

Exploit für Ingress NGINX - IngressNightmare Dieses Projekt stellt einen Exploit für kritische unauthenticated Remote Code Execution RCE Schwachstellen im Ingress NGINX Controller für Kubernetes bereit, die gemeinsam als IngressNightmare bezeichnet werden. Forschung von Wiz In der ursprünglichen...

IngressNightmare-POCs

IngressNightmare-POCs CVE-2025-24513: https://github.com/kubernetes/kubernetes/issues/131005 CVE-2025-24514: https://github.com/kubernetes/kubernetes/issues/131006 CVE-2025-1097: https://github.com/kubernetes/kubernetes/issues/131007 CVE-2025-1098:...