CVE-2026-42533-nginx

CVE-2026-42533 nginx This repository contains a Go-based scanner for identifying nginx configuration patterns associated with the complexvalue two-pass capture-clobbering issue described in CVE-2026-42533. Overview The tool analyzes nginx configuration files and directories to detect risky...

ssrfnginx

ssrfnginx...

CVE-2026-42533

NGINX Vulnerability Checker Script to non-intrusively check if an NGINX installation could be affected by vulnerability CVE-2026-42533. Important: This project does not exploit the vulnerability. It only performs local checks on the installed version and server configuration to identify potential...

ghostlock-vagrant-box

Full Chain Vulnerability Testbed: Nginx RCE → GhostLock LPE Overview This repository provides a Vagrant environment designed to demonstrate a complete two-stage exploitation chain. The testbed automatically provisions an isolated Ubuntu 22.04 LTS virtual machine that is intentionally configured t...

CVE-2026-42945

CVE-2026-42945 PoC Go 中文 | English A detection and exploitation helper for nginx HTTP/2 CVE-2026-42945. Use it only in authorized environments to verify vulnerability presence, compare patched vs. vulnerable behavior, and reproduce PoC logic in a controlled lab. Affected versions heuristic: nginx...

cve-2025-24514

🔥 CVE-2025-24514 Remote Vulnerability Check PoC This script is a Python-based PoC that can remotely check for the CVE-2025-24514 vulnerability NGINX configuration manipulation and potential RCE through auth-url injection in ingress-nginx. 🧠 Vulnerability Overview CVE-2025-24514 is a vulnerability...

heartbleed

heartbleed CVE-2014-0160 OpenSSL Heartbleed Proof of Concept Download and execute the Docker container Vulnerable Nginx server root@kitploit: docker run -p 4443:443 -it --rm --name hb gescobero/heartbleed:1.0 Compile Heartbleed attack root@kitploit: gcc heartbleed.c -o heartbleed Execute it with...

ingressNightmare-CVE-2025-1974-exps

Ingress Nightmare CVE-2025-1907 Description This vulnerability allows remote attackers to execute arbitrary code on affected installations of kubernetes/ingress-nginx. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP requests. It i...

Nginx-Rift

NGINX Rift RCE Proof of concept for CVE-2026-42945 , a critical heap buffer overflow in NGINX's ngxhttprewritemodule introduced in 2008. The bug enables unauthenticated remote code execution against servers using rewrite and set directives. This vulnerability — along with three other memory...

nginx-rift-detector

Detector de Rift NGINX para CVE-2026-42945 Verificador Bash de solo lectura para servidores NGINX comprometidos. Ayuda a un operador a responder dos preguntas tras la divulgación de CVE-2026-42945: ¿Este servidor sigue ejecutando una compilación NGINX expuesta o una configuración de reescritura...

CVE-2013-2028_Checker

CVE-2013-2028 - Nginx HTTP Server 1.3.9-1.4.0 Chunked Encoding Stack Buffer Overflow Description The ngxhttpparsechunked function in http/ngxhttpparse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service crash and execute arbitrary code via a chunked Transfer-Encodi...

nginx-rce-cve-2026-42945

5. CVE-2026-42945 - RCE Crítico en NGINX CVSS 9.2 Clasificación Categoría: 0-Day / Ejecución Remota de Código CVE: CVE-2026-42945 CVSS: 9.2 Crítico Fecha de descubrimiento: 12 de mayo de 2026 Fecha de parche: Mayo de 2026 parche de seguridad trimestral de F5 Fuente: GitHub...

ingress-nightmare

IngressNightmare CVE-2025-1974 This Python script can help you understand if you're running the Ingress NGINX Controller, and if yes if it's using a known vulnerable version. Usage First, make sure to install uv from here and then run the script against the Kubernetes cluster to audit...

nginx-cve-2026-42945

CVE-2026-42945 NGINX Rift — defensive scanner Organizations running NGINX Open Source , NGINX Plus , or NGINX-based ingress/controllers should verify whether they are affected by CVE-2026-42945 and patch or reconfigure before exploitation attempts hit production edges. This repository provides a...

fix_nginx_CVE-2013-4547_IB

fixnginxCVE-2013-4547IB...

CVE-2026-49975-HTTP-2-Bomb

A triage not exploitation tool to identify attack surfaces exposed to CVE-2026-49975 — "HTTP/2 Bomb". ⚠️ This script does not send attack payloads. It only makes normal HTTP requests and analyzes response headers to flag hosts that warrant manual version/patch verification. About CVE-2026-49975...

CVE-2024-7646

CVE-2024-7646 PoC CVE-2024-7646 root@kitploit: apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: example-ingress annotations: nginx.ingress.kubernetes.io/server-snippet: | addheader X-Pwn-Header "Pwn\r\n HTTP/1.1 200 OK Content-Type: text/html alert'XSS'; --------"; return 200 "PWNed...

CVE-2024-46256

CVE-2024-46256 Nginx Proxy Manager RCE Vulnerability Analysis Environment Setup 1. Running Nginx Proxy Manager 2.11.3 Environment root@kitploit: docker-compose up -d Or you can use the automated script: root@kitploit: python setupenvironment.py 2. Accessing Nginx Proxy Manager URL:...

CVE-2025-1974-PoC-exploit

CVE-2025-1974-PoC-exploit Kubernetes Ingress-nginx RCE IngressNightmare root@kitploit: ❯ python3 exploit.py http://localhost:8443 "id" ============================================================ CVE-2025-1974 - IngressNightmare Exploit ============================================================...

safe-check-CVE-2025-23419

Safe Check CVE-2025-23419 - NGINX mTLS Session Resumption Repository with a safe validation script for CVE-2025-23419 , a vulnerability related to NGINX , mTLS , and TLS session resumption. The script performs a heuristic check to identify possible exposure to the flaw, without executing active...