Nginx : Remote-Integer-Overflow-Vulnerability

This Repository consists of an older yet existing Nginx vulnerability named "Remote Integer Overflow Vulnerability (CVE-2017-7529)". The Vulnerability is for Older Nginx servers (>>1.13). (Exception is for Nginx 1.12)

Set-up :

Download sys library and requests library.
It will be better if you have os library too.

The Vulnerability that can be exploited to includes :-

    1) Reading Sensitive Headers during an Intercept of Requests.
   
    2) Revealing Sensitive Informatino containing real IP Addresses.

This Repo Consists of :-

    1) vulnchecker.py : The scripts that checks for R.I.V.O Vulnerability in Nginx servers.
   
    2) exploit.py : The script that will exploit sensitive headers where Nginx server v1.1x (except v1.12) is running.

Steps to use :

    1) python3 vulnchecker.py --url <http://example.com/>
    2) python3 exploit.py --url <http://example.com/>

Remote-Integer-Overflow-Vulnerability

Most Popular

Nginx : Remote-Integer-Overflow-Vulnerability

Set-up :

The Vulnerability that can be exploited to includes :-

This Repo Consists of :-

Steps to use :

Please do use the second step only when the first one executes, else your time will be wasted.

Keep hacking for good