Skip to content
KitploitKITPLOIT
ToolsBlog
Einreichen
ToolsBlog
Einreichen

Hacking-, PenTest- und Cybersicherheits-Tools für Ihr Sicherheitsarsenal!

Kitploit ist ein Verzeichnis von Hacking-, Cybersicherheits- und Pentesting-Tools. Entdecken Sie die neuesten Projekt-Updates, um Schwachstellen zu finden, Systeme zu analysieren, Tests zu automatisieren und Ihre Sicherheit zu stärken.

··Feeds·Kontakt·Datenschutz·© 2026 Kitploit

Tool-Verzeichnis

Kategorien

Alle Kategorien anzeigen
Loading categories
puma_header_normalization-CVE-2024-45614 — Puma Header-Normalisierung CVE-2024-45614 Überprüfung | Kitploit
Tools/GitHubGitHub/ooooooo-q/puma_header_normalization-cve-2024-45614
SchwachstellenanalyseWebsicherheitPenetrationstestsLernen & BildungLabs & Praxis
GitHubooooooo-q/puma_header_normalization-cve-2024-45614

puma_header_normalization-CVE-2024-45614

Puma Header-Normalisierung CVE-2024-45614 Überprüfung

Repository anzeigen
3vor 1 JahrNoch nicht geprüft

Beliebteste

Alle anzeigen →

Entdecken Sie die meistgenutzten Tools unserer Community.

Alle Tools erkunden

Durchsuchen Sie unsere Tool-Sammlung

Alle Tools anzeigen →
Teilen

Puma Header normalization CVE-2024-45614 Überprüfung

  • advisory: https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4
  • Korrektur-Commit: https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043

Ergebnisse

Ausführungsergebnisse von request.rb

duplicate

ZielErgebnis
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 2.2.2.2

under_score

ZielErgebnis
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 1.1.1.1
puma_after_fix_rack3X_FORWARDED_FOR: 1.1.1.1
pitchfork_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 1.1.1.1
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 1.1.1.1,2.2.2.2

reverse_under_score

ZielErgebnis
puma_before_fix_rack2X_FORWARDED_FOR: 1.1.1.1
puma_before_fix_rack3X_FORWARDED_FOR: 1.1.1.1
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 1.1.1.1,2.2.2.2

upper_case

ZielErgebnis
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 2.2.2.2

reverse_upper_case

ZielErgebnis
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 2.2.2.2

Server-Start

Puma

root@kitploit:~
# CVE-2024-45614 Fix vorher Rack2
$ cd puma_before_fix_rack2 
$ RACK_ENV=production bundle exec puma -p 9000 ../config.ru

# CVE-2024-45614 Fix vorher Rack3
$ cd puma_before_fix_rack3 
$ RACK_ENV=production bundle exec puma -p 9001 ../config.ru

# CVE-2024-45614 Fix nachher Rack2
$ cd puma_after_fix_rack2
$ RACK_ENV=production bundle exec puma -p 9002 ../config.ru

# CVE-2024-45614 Fix nachher Rack3
$ cd puma_after_fix_rack2 
$ RACK_ENV=production bundle exec puma -p 9003 ../config.ru

Pitchfork

root@kitploit:~
# Rack2
$ cd pitchfork_rack2 
$ RACK_ENV=production bundle exec pitchfork -p 9010 ../config.ru

# Rack3
$ cd pitchfork_rack3 
$ RACK_ENV=production bundle exec pitchfork -p 9011 ../config.ru

Unicorn

root@kitploit:~
# Rack2
$ cd unicorn_rack2 
$ RACK_ENV=production bundle exec unicorn -p 9020 ../config.ru

# Rack3
# * Zum Zeitpunkt der Untersuchung war die Unterstützung für Rack3 noch nicht abgeschlossen, aber der Server läuft.
$ cd unicorn_rack3 
$ RACK_ENV=production bundle exec unicorn -p 9021 ../config.ru

Thin

root@kitploit:~
# Rack2
$ cd thin_rack2 
$ RACK_ENV=production bundle exec thin start -p 9030 -R ../config.ru

# Rack3
# * Die untersuchte Version unterstützt Rack3 nicht, daher ist bundle install nicht möglich.

Falcon

  • Zur einfacheren Überprüfung mit HTTP1 gestartet.
root@kitploit:~
# Rack2
$ cd falcon_rack2 
$ RACK_ENV=production bundle exec rackup --server falcon -p 9040 ../config.ru
# * Konnte nicht zum Laufen gebracht werden.

# Rack3
$ cd falcon_rack3 
$ RACK_ENV=production bundle exec rackup --server falcon -p 9041 ../config.ru

Nginx

root@kitploit:~
$ docker run --name heade_test_nginx -v $(pwd)/nginx.conf:/etc/nginx/nginx.conf:ro -d -p 9100:80 -p 9101:81 nginx
Tool herunterladen