Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Simulation_CVE-2024-46256 — Step-by-step, image-backed proof-of-concept simulation of OS command injection vulnerabilities (CVE-2024-46256 and CVE-2024-46257) in Nginx Proxy Manager v2.11.3, demonstrating authenticated remote code execution for educational and defensive research. | Kitploit
Tools/GitHubGitHub/trandonga3/simulation_cve-2024-46256
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingCommand and ControlLearning & Education
GitHubtrandonga3/simulation_cve-2024-46256

Simulation_CVE-2024-46256

Step-by-step, image-backed proof-of-concept simulation of OS command injection vulnerabilities (CVE-2024-46256 and CVE-2024-46257) in Nginx Proxy Manager v2.11.3, demonstrating authenticated remote code execution for educational and defensive research.

View Repository
311 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-46256 & CVE-2024-46257 – PoC Simulation

Overview

This repository contains a step-by-step, image-backed Proof of Concept (PoC) simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution (RCE) after authentication.

  • Affected product: Nginx Proxy Manager
  • Affected version: v2.11.3
  • Impact: Authenticated RCE (observed with root privileges in PoC)

Contents

  • POC.md: Detailed write-up of the analysis and exploitation steps, including payloads and observations.
  • static/: Screenshots referenced by POC.md in the order they appear.

How to Use

  1. Open POC.md to follow the simulation narrative.
  2. Each section references images from static/ to illustrate setup, code review, exploitation, and results.

Notes and Disclaimer

  • The PoC is for educational and defensive security research only.
  • Do not use against systems you do not own or have explicit permission to test.
  • Always update to patched versions and apply least-privilege principles.

References

  • Nginx Proxy Manager repository: https://github.com/NginxProxyManager/nginx-proxy-manager
  • CVE-2024-46256
  • CVE-2024-46257
Download Tool