post: commit 504fd85 in borodino

content/posts/commits/2026-07-20-commit-504fd85.md

@@ -0,0 +1,57 @@
+---
+title: "[borodino] feat(campagne-nginx): campagne CVE-2026-42533 + misconfigs nginx"
+date: 2026-07-20T16:58:17+02:00
+draft: false
+tags: ["commit", "borodino", "main"]
+categories: ["Git Activity"]
+summary: "Commit 504fd85 par Claude Code dans borodino"
+author: "Claude Code"
+---
+
+## Commit `504fd85`
+
+| | |
+|---|---|
+| **Repository** | borodino |
+| **Branch** | `main` |
+| **Author** | Claude Code |
+| **Hash** | `504fd8567391b36a0dac1efb76aec8f76700bc19` |
+
+
+### Description
+
+- thearm_campagne_nginx: worker qui sélectionne les hosts nginx (bm12_v3)
+  depuis MSF DB, probe HTTP (version + misconfigs), dispatch vers nuclei queue
+- Templates Nuclei: cve-2026-42533, alias-traversal, stub-status,
+  crlf-injection, proxy-headers-ssrf
+- Service campagne-nginx-service (1 replica, meta-68)
+- Findings pushés vers DefectDojo + Telegram sur vuln/misconfig détectée
+
+Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
+
+### Files Changed
+
+```
+M	Dockerfile.borodino
+A	nuclei-templates/cves/2026/cve-2026-42533-nginx.yaml
+A	nuclei-templates/misconfigs/nginx/nginx-alias-traversal.yaml
+A	nuclei-templates/misconfigs/nginx/nginx-crlf-injection.yaml
+A	nuclei-templates/misconfigs/nginx/nginx-proxy-headers-ssrf.yaml
+A	nuclei-templates/misconfigs/nginx/nginx-stub-status.yaml
+M	stack/40-service-borodino.yml
+A	thearm_campagne_nginx
+```
+
+### Diff Summary
+
+```
+ Dockerfile.borodino                                |   1 +
+ .../cves/2026/cve-2026-42533-nginx.yaml            |  42 ++
+ .../misconfigs/nginx/nginx-alias-traversal.yaml    |  36 ++
+ .../misconfigs/nginx/nginx-crlf-injection.yaml     |  26 ++
+ .../misconfigs/nginx/nginx-proxy-headers-ssrf.yaml |  43 +++
+ .../misconfigs/nginx/nginx-stub-status.yaml        |  37 ++
+ stack/40-service-borodino.yml                      |  30 ++
+ thearm_campagne_nginx                              | 429 +++++++++++++++++++++
+ 8 files changed, 644 insertions(+)
+```