🛡️ Nginx Vulnerability Scanner

Developed by m10sec.

This script automatically detects the Nginx version on a remote server and evaluates whether it is vulnerable to known security flaws, specifically:

• CVE-2023-44487 – HTTP/2 Rapid Reset Attack
• CVE-2022-41741 – Memory corruption in ngx_http_mp4_module
• CVE-2022-41742 – Memory disclosure in ngx_http_mp4_module

---

🚀 Features

• Prompts the user for a URL or IP of the server to analyze.
• Detects if the server is running Nginx and extracts its version.
• Checks whether the ngx_http_mp4_module module is active.
• Determines if the server may be vulnerable to the mentioned CVEs.
• Reports mitigation recommendations if applicable.

---

📥 Requirements

• Python 3.6+
• Libraries:
  root@kitploit:~

  pip install requests packaging
  

---

🙌 Buying me a coffee?

If this tool has been useful to you or you want to support future development, you can buy me a coffee ☕ or make a donation. Any support counts!

---

📬 Contact and social networks

• 💌 Email: [email protected]
• 🌐 Blog: https://m10.com.mx
• 🐦 Twitter: @hack4lifemx
• 💼 LinkedIn: Francisco Santibañez
• 🐙 GitHub: github.com/m10sec

---

🛡️ Philosophy

I believe in a world where users have control over their privacy. This tool was born from the trenches of real pentesting, with love for digital freedom and hacking with purpose.

---

⭐ If you liked this project, give it a star on GitHub and share it with your community.