POC-IngressNightmare-CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...

CVE-2025-29927-POC

CVE-2025-29927-POC Introduction This repository contains a Proof of Concept PoC for CVE-2025-29927, a hypothetical vulnerability demonstrating a flaw in middleware handling within a web application. The PoC illustrates how a specially crafted HTTP request can bypass redirection logic to access...

nginx-1.4.0

nginx-1.4.0 Para el análisis de CVE-2013-2028 exploit: exp-nginx.rb binario para construcción rop: nginx...

Nginx-Remote-Integer-Overflow-Vulnerability

Vulnerabilidad de desbordamiento de enteros remoto en Nginx CVE-2017-7529 https://www.cvedetails.com/cve/CVE-2017-7529/...

pwndrop

pwndrop is a self-deployable file hosting service for sending out red teaming payloads or securely sharing your private files over HTTP and WebDAV. If you've ever needed to quickly set up an nginx/apache web server to host your files and you were never happy with the limitations of python -m...

CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then root@kitploi...

nginxconfig.io

⚙️ NGINX configuration generator on steroids 💉 The only tool you'll ever need to configure your NGINX server. do.co/nginxconfig » Report a bug · Request a feature ✨ NGINX Config NGINX is so much more than just a webserver. You already knew that, probably. We love NGINX, because: Low memory usage...

navgix

navgix navgix es una herramienta en golang multihebra que verificará vulnerabilidades de alias traversal en nginx Técnicas Actualmente, navgix soporta 2 técnicas para encontrar directorios vulnerables o alias de ubicación. Estas son las siguientes: Heurística navgix realizará una solicitud GET...

CVE-2000-0649

CVE-2000-0649 CVE-2000-0649 is a low risk vulnerability that can potentially disclose the internal IP addresses of the server. Official details are here: Rapid7 CVE NIST This particular vulnerability became of interest to me because it seems to affect current NGINX and some Apache setups as well...

IngressNightmare-RCE-POC

⚠️ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more This repository contains a proof-of-concept PoC exploit for CVE-2025-1974 , a Critical CVSS 9.8 vulnerability in the Ingress-NGINX controller for Kubernetes. This flaw allows unauthenticated remote code execution...

pwnspoof

pwnSpoof from Punk Security generates realistic spoofed log files for common web servers with customisable attack scenarios. Every log bundle is unique and completely customisable, making it perfect for generating CTF scenarios and for training serials. Can you find the attacker session and build...

CVE-2017-7529

Descripción de CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a un desbordamiento de enteros en el módulo range filter de nginx, lo que resulta en la filtración de información potencialmente sensible provocada por una solicitud especialmente diseñada...

CVE-2025-0108

CVE-2025-0108 — WebSecurity PoC & Fix This repository contains a small lab environment for reproducing and mitigating the CVE-2025-0108 issue path confusion / header smuggling between Nginx and Apache. The goal of the assignment is to demonstrate how double-encoded requests can bypass...

ai-vuln-rediscovery-nginx-cve-2026-42945

AI-Assisted Rediscovery of CVE-2026-42945 in nginx This repository documents a reproducible AI-assisted vulnerability rediscovery experiment against nginx ngxhttprewritemodule, later associated with CVE-2026-42945. The experiment is intentionally narrow. The vulnerable file,...

c2-cloud

About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...

ycsm

You Can't See Me YCSM Este es un script de instalación rápida para un redirector resiliente que utiliza nginx como proxy inverso y letsencrypt, compatible con algunos RAT populares Cobalt Strike, Empire, Metasploit. Si se selecciona HTTPS, configurará automáticamente letsencrypt certbot, obtendrá...

CVE-2017-7529

CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a una vulnerabilidad de desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la fuga de información potencialmente sensible provocada por una solicitud especialmente...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Desarrollado por m10sec. Este script detecta automáticamente la versión de Nginx en un servidor remoto y evalúa si es vulnerable a fallos de seguridad conocidos, específicamente: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Corrupción de memoria en...

cve-2026-42945

CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...

GPEWebDefender

GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...