stark0de/nginxpwner

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1599 stars · 149 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Nginxpwner is a Python command-line tool that scans Nginx servers for common misconfigurations and known vulnerabilities, such as CRLF injection, path traversal, off-by-slash issues, and CVE-2017-7529. It integrates with tools like searchsploit, gobuster, and Kyubi to enumerate and exploit Nginx-specific weaknesses.

Use cases

• audit nginx servers for misconfigurations
• find nginx vulnerabilities during a pentest
• check if nginx version is outdated and exploitable
• test for CRLF injection in nginx redirects
• detect path traversal via misconfigured alias
• test 401/403 bypass with X-Accel-Redirect
• check for CVE-2017-7529 range filter overflow

When to choose

• you are pentesting a site known or suspected to run Nginx
• you want an automated check for common nginx.conf mistakes
• you run Kali/Burp workflows and want a targeted Nginx scanner

When to avoid

• the target does not run Nginx or a Nginx-based stack
• you need web cache poisoning, request smuggling, or general web app scanning
• you need a passive or production-safe monitoring tool rather than an active scanner

Facets

cli-tool · maturity maintenance

security penetration-testing vulnerability-scanning http-client cli security penetration-testing web-development developer-tools python cli nginx misconfiguration-scanner offensive-security burp-suite web-security cve-scanning command-line linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="stark0de/nginxpwner")