---
title: "[borodino] feat(campagne-nginx): campagne CVE-2026-42533 + misconfigs nginx"
date: 2026-07-20T16:58:17+02:00
draft: false
tags: ["commit", "borodino", "main"]
categories: ["Git Activity"]
summary: "Commit 504fd85 par Claude Code dans borodino"
author: "Claude Code"
---

## Commit `504fd85`

| | |
|---|---|
| **Repository** | borodino |
| **Branch** | `main` |
| **Author** | Claude Code |
| **Hash** | `504fd8567391b36a0dac1efb76aec8f76700bc19` |


### Description

- thearm_campagne_nginx: worker qui sélectionne les hosts nginx (bm12_v3)
  depuis MSF DB, probe HTTP (version + misconfigs), dispatch vers nuclei queue
- Templates Nuclei: cve-2026-42533, alias-traversal, stub-status,
  crlf-injection, proxy-headers-ssrf
- Service campagne-nginx-service (1 replica, meta-68)
- Findings pushés vers DefectDojo + Telegram sur vuln/misconfig détectée

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

### Files Changed

```
M	Dockerfile.borodino
A	nuclei-templates/cves/2026/cve-2026-42533-nginx.yaml
A	nuclei-templates/misconfigs/nginx/nginx-alias-traversal.yaml
A	nuclei-templates/misconfigs/nginx/nginx-crlf-injection.yaml
A	nuclei-templates/misconfigs/nginx/nginx-proxy-headers-ssrf.yaml
A	nuclei-templates/misconfigs/nginx/nginx-stub-status.yaml
M	stack/40-service-borodino.yml
A	thearm_campagne_nginx
```

### Diff Summary

```
 Dockerfile.borodino                                |   1 +
 .../cves/2026/cve-2026-42533-nginx.yaml            |  42 ++
 .../misconfigs/nginx/nginx-alias-traversal.yaml    |  36 ++
 .../misconfigs/nginx/nginx-crlf-injection.yaml     |  26 ++
 .../misconfigs/nginx/nginx-proxy-headers-ssrf.yaml |  43 +++
 .../misconfigs/nginx/nginx-stub-status.yaml        |  37 ++
 stack/40-service-borodino.yml                      |  30 ++
 thearm_campagne_nginx                              | 429 +++++++++++++++++++++
 8 files changed, 644 insertions(+)
```