blog/content/posts/commits/2026-07-20-commit-504fd85.md

title, date, draft, tags, categories, summary, author

title	date	draft	tags	categories	summary	author
[borodino] feat(campagne-nginx): campagne CVE-2026-42533 + misconfigs nginx	2026-07-20T16:58:17+02:00	false	commit borodino main	Git Activity	Commit 504fd85 par Claude Code dans borodino	Claude Code

Commit 504fd85

Repository	borodino
Branch	main
Author	Claude Code
Hash	504fd8567391b36a0dac1efb76aec8f76700bc19

Description

• thearm_campagne_nginx: worker qui sélectionne les hosts nginx (bm12_v3) depuis MSF DB, probe HTTP (version + misconfigs), dispatch vers nuclei queue
• Templates Nuclei: cve-2026-42533, alias-traversal, stub-status, crlf-injection, proxy-headers-ssrf
• Service campagne-nginx-service (1 replica, meta-68)
• Findings pushés vers DefectDojo + Telegram sur vuln/misconfig détectée

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

Files Changed

M	Dockerfile.borodino
A	nuclei-templates/cves/2026/cve-2026-42533-nginx.yaml
A	nuclei-templates/misconfigs/nginx/nginx-alias-traversal.yaml
A	nuclei-templates/misconfigs/nginx/nginx-crlf-injection.yaml
A	nuclei-templates/misconfigs/nginx/nginx-proxy-headers-ssrf.yaml
A	nuclei-templates/misconfigs/nginx/nginx-stub-status.yaml
M	stack/40-service-borodino.yml
A	thearm_campagne_nginx

Diff Summary

 Dockerfile.borodino                                |   1 +
 .../cves/2026/cve-2026-42533-nginx.yaml            |  42 ++
 .../misconfigs/nginx/nginx-alias-traversal.yaml    |  36 ++
 .../misconfigs/nginx/nginx-crlf-injection.yaml     |  26 ++
 .../misconfigs/nginx/nginx-proxy-headers-ssrf.yaml |  43 +++
 .../misconfigs/nginx/nginx-stub-status.yaml        |  37 ++
 stack/40-service-borodino.yml                      |  30 ++
 thearm_campagne_nginx                              | 429 +++++++++++++++++++++
 8 files changed, 644 insertions(+)