Skip to content
KitploitKITPLOIT
OutilsBlog
Soumettre
OutilsBlog
Soumettre

Outils de Hacking, PenTest et Cybersécurité pour votre Arsenal de Sécurité !

Kitploit est un répertoire d'outils de hacking, de cybersécurité et de pentesting. Découvrez les dernières mises à jour des projets pour trouver des vulnérabilités, analyser des systèmes, automatiser les tests et renforcer votre sécurité.

··Flux·Contact·Confidentialité·© 2026 Kitploit

Répertoire d'outils

Catégories

Voir toutes les catégories
Loading categories
puma_header_normalization-CVE-2024-45614 — Puma Header normalization CVE-2024-45614 確認 | Kitploit
Outils/GitHubGitHub/ooooooo-q/puma_header_normalization-cve-2024-45614
Vulnerability AnalysisWeb SecurityPenetration TestingLearning & EducationLabs & Practice
GitHubooooooo-q/puma_header_normalization-cve-2024-45614

puma_header_normalization-CVE-2024-45614

Puma Header normalization CVE-2024-45614 確認

Voir le dépôt

Populaires

Voir tout →

Découvrez les outils les plus utilisés par notre communauté.

Explorer tous les outils

Parcourez notre collection d'outils

Voir tous les outils →
Partager
il y a 1 anPas encore vérifié

Puma Header normalization CVE-2024-45614 確認

  • avis : https://github.com/puma/puma/security/advisories/GHSA-9hf4-67fc-4vf4
  • commit de correction : https://github.com/puma/puma/commit/cac3fd18cf29ed43719ff5d52d9cfec215f0a043

Résultats

Résultat de l'exécution de request.rb

duplicate

CibleRésultat
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 2.2.2.2

under_score

reverse_under_score

upper_case

reverse_upper_case

Démarrage de chaque serveur

Puma

root@kitploit:~
# CVE-2024-45614修正前 Rack2
$ cd puma_before_fix_rack2 
$ RACK_ENV=production bundle exec puma -p 9000 ../config.ru

# CVE-2024-45614修正前 Rack3
$ cd puma_before_fix_rack3 
$ RACK_ENV=production bundle exec puma -p 9001 ../config.ru

# CVE-2024-45614修正後 Rack2
$ cd puma_after_fix_rack2
$ RACK_ENV=production bundle exec puma -p 9002 ../config.ru

# CVE-2024-45614修正後 Rack3
$ cd puma_after_fix_rack2 
$ RACK_ENV=production bundle exec puma -p 9003 ../config.ru

Pitchfork

root@kitploit:~
# Rack2
$ cd pitchfork_rack2 
$ RACK_ENV=production bundle exec pitchfork -p 9010 ../config.ru

# Rack3
$ cd pitchfork_rack3 
$ RACK_ENV=production bundle exec pitchfork -p 9011 ../config.ru

Unicorn

root@kitploit:~
# Rack2
$ cd unicorn_rack2 
$ RACK_ENV=production bundle exec unicorn -p 9020 ../config.ru

# Rack3
# * 調査時のバージョンではRack3の対応は完了していないが、サーバは動く
$ cd unicorn_rack3 
$ RACK_ENV=production bundle exec unicorn -p 9021 ../config.ru

Thin

root@kitploit:~
# Rack2
$ cd thin_rack2 
$ RACK_ENV=production bundle exec thin start -p 9030 -R ../config.ru

# Rack3
# * 調査のバージョンではRack3に未対応であり、bundle installができない

Falcon

  • Démarré en HTTP1 pour faciliter la vérification
root@kitploit:~
# Rack2
$ cd falcon_rack2 
$ RACK_ENV=production bundle exec rackup --server falcon -p 9040 ../config.ru
# * 動かせていない

# Rack3
$ cd falcon_rack3 
$ RACK_ENV=production bundle exec rackup --server falcon -p 9041 ../config.ru

Nginx

root@kitploit:~
$ docker run --name heade_test_nginx -v $(pwd)/nginx.conf:/etc/nginx/nginx.conf:ro -d -p 9100:80 -p 9101:81 nginx
Télécharger l’outil
CibleRésultat
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 1.1.1.1
puma_after_fix_rack3X_FORWARDED_FOR: 1.1.1.1
pitchfork_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 1.1.1.1
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 1.1.1.1,2.2.2.2
CibleRésultat
puma_before_fix_rack2X_FORWARDED_FOR: 1.1.1.1
puma_before_fix_rack3X_FORWARDED_FOR: 1.1.1.1
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 1.1.1.1,2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 1.1.1.1,2.2.2.2
CibleRésultat
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 2.2.2.2
CibleRésultat
puma_before_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_before_fix_rack3X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack2X_FORWARDED_FOR: 2.2.2.2
puma_after_fix_rack3X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack2X_FORWARDED_FOR: 2.2.2.2
pitchfork_rack3X_FORWARDED_FOR: 2.2.2.2
unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
unicorn_rack3X_FORWARDED_FOR: 2.2.2.2
thin_rack2X_FORWARDED_FOR: 2.2.2.2
falcon_rack3X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2X_FORWARDED_FOR: 2.2.2.2
nginx_unicorn_rack2_underscore_onX_FORWARDED_FOR: 2.2.2.2