Poc for CVE 2019-20372

[email protected]

Description

NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

CVE-2019-20372 Exploiter

This Python script is designed to perform a series of security tests on a web server with the aim of detecting the CVE-2019-20372 vulnerability on servers running a vulnerable version of Nginx (1.14.2). Additionally, the script checks the HTTP headers, the allowed methods, and attempts an exploitation.

Features

1. Retrieve the HTTP headers:

   • Makes a GET request to the server and displays the HTTP headers obtained.

2. Check the Nginx version:

   • Checks whether the server is using Nginx and extracts its version from the Server header.
   • If the version is 1.14.2, the CVE-2019-20372 vulnerability may be present.

3. Check the allowed HTTP methods:

   • Makes an OPTIONS request to check the HTTP methods allowed by the server.

4. Attempt to exploit the CVE-2019-20372 vulnerability:

   • If the server is vulnerable, it attempts to upload a malicious PHP file to execute code on the server.

Requirements

• Python 3.x
• requests package (Install using pip install requests)