Nginx:远程整数溢出漏洞

该仓库包含一个较老但仍存在的Nginx漏洞,名为“远程整数溢出漏洞(CVE-2017-7529)”。该漏洞针对较旧的Nginx服务器(>>1.13)。(例外:Nginx 1.12)
设置:
- 下载sys库和requests库。
- 如果同时拥有os库会更好。
可利用的漏洞包括:
1) Reading Sensitive Headers during an Intercept of Requests.
2) Revealing Sensitive Informatino containing real IP Addresses.
此仓库包含:
1) vulnchecker.py : The scripts that checks for R.I.V.O Vulnerability in Nginx servers.
2) exploit.py : The script that will exploit sensitive headers where Nginx server v1.1x (except v1.12) is running.
使用步骤:
1) python3 vulnchecker.py --url <http://example.com/>
2) python3 exploit.py --url <http://example.com/>