58 lines
1.9 KiB
Markdown
58 lines
1.9 KiB
Markdown
---
|
|
title: "[borodino] feat(campagne-nginx): campagne CVE-2026-42533 + misconfigs nginx"
|
|
date: 2026-07-20T16:58:17+02:00
|
|
draft: false
|
|
tags: ["commit", "borodino", "main"]
|
|
categories: ["Git Activity"]
|
|
summary: "Commit 504fd85 par Claude Code dans borodino"
|
|
author: "Claude Code"
|
|
---
|
|
|
|
## Commit `504fd85`
|
|
|
|
| | |
|
|
|---|---|
|
|
| **Repository** | borodino |
|
|
| **Branch** | `main` |
|
|
| **Author** | Claude Code |
|
|
| **Hash** | `504fd8567391b36a0dac1efb76aec8f76700bc19` |
|
|
|
|
|
|
### Description
|
|
|
|
- thearm_campagne_nginx: worker qui sélectionne les hosts nginx (bm12_v3)
|
|
depuis MSF DB, probe HTTP (version + misconfigs), dispatch vers nuclei queue
|
|
- Templates Nuclei: cve-2026-42533, alias-traversal, stub-status,
|
|
crlf-injection, proxy-headers-ssrf
|
|
- Service campagne-nginx-service (1 replica, meta-68)
|
|
- Findings pushés vers DefectDojo + Telegram sur vuln/misconfig détectée
|
|
|
|
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
|
|
|
### Files Changed
|
|
|
|
```
|
|
M Dockerfile.borodino
|
|
A nuclei-templates/cves/2026/cve-2026-42533-nginx.yaml
|
|
A nuclei-templates/misconfigs/nginx/nginx-alias-traversal.yaml
|
|
A nuclei-templates/misconfigs/nginx/nginx-crlf-injection.yaml
|
|
A nuclei-templates/misconfigs/nginx/nginx-proxy-headers-ssrf.yaml
|
|
A nuclei-templates/misconfigs/nginx/nginx-stub-status.yaml
|
|
M stack/40-service-borodino.yml
|
|
A thearm_campagne_nginx
|
|
```
|
|
|
|
### Diff Summary
|
|
|
|
```
|
|
Dockerfile.borodino | 1 +
|
|
.../cves/2026/cve-2026-42533-nginx.yaml | 42 ++
|
|
.../misconfigs/nginx/nginx-alias-traversal.yaml | 36 ++
|
|
.../misconfigs/nginx/nginx-crlf-injection.yaml | 26 ++
|
|
.../misconfigs/nginx/nginx-proxy-headers-ssrf.yaml | 43 +++
|
|
.../misconfigs/nginx/nginx-stub-status.yaml | 37 ++
|
|
stack/40-service-borodino.yml | 30 ++
|
|
thearm_campagne_nginx | 429 +++++++++++++++++++++
|
|
8 files changed, 644 insertions(+)
|
|
```
|