Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-49368 — Explorations of CVE-2024-49368 + Exploit Development | Kitploit
Tools/GitHubGitHub/aashay221999/cve-2024-49368
Vulnerability AnalysisExploitationWeb Application ExploitationCommand and ControlLearning & EducationLabs & Practice
GitHubaashay221999/cve-2024-49368

CVE-2024-49368

Explorations of CVE-2024-49368 + Exploit Development

View Repository
21 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Nginx UI Exploit Setup

This guide outlines the steps to set up Nginx UI using Docker Compose, create a user, run an exploit, and verify the results within the Docker container.

Prerequisites

  • Ensure you have Docker and Docker Compose installed on your machine.
  • Familiarity with basic command-line operations.

Installing nginx via docker

  1. Download the docker-compose.yml
  2. Verify that your nginx.conf file has these lines. Note: in linux (Ubuntu), this file is at /etc/nginx/nginx.conf
    root@kitploit:~
         http {
             # ...
             include /etc/nginx/conf.d/*.conf;
             include /etc/nginx/sites-enabled/*;
         }
    
  3. Create a local directory www in your working directory. Copy its path and change the first half of line 13 in the docker compose yaml (Just the part before the :).
    root@kitploit:~
        Line 13 ~/cve_session1/nginx/www
    
  4. Create your container by:
    root@kitploit:~
        docker compose up -d
    
  5. Wait a couple of minutes and check if the docker image is running: You should see the nginx docker running.
Download Tool
root@kitploit:~
    sudo docker ps
  • Login to the nginx UI at http://127.0.0.1:8080/#/login
  • Create an admin user accounts. Username: admin , Password: admin.
  • Then within the nginx UI create another user: Username: basic , Password: basic. Note: You can create the users with whatever names and password you want. Just make sure to update the python script
  • Run the exploit. It is fairly self-explanatory.
  • Login to docker and check that the command injection works.
    root@kitploit:~
         # Get container id first
         docker ps
    
         # Access container shell
         docker exec -it <container-id> /bin/sh
    
         # Check the tmp directory
         ls -l /tmp