neex/phuip-fpizdam

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1831 stars · 249 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Go-based exploit tool for CVE-2019-11043, a remote code execution vulnerability in php-fpm when used behind certain nginx configurations. It sends crafted requests to trigger the bug and gain code execution on vulnerable servers.

Use cases

• test if my nginx + php-fpm setup is vulnerable to CVE-2019-11043
• demonstrate php-fpm remote code execution in a pentest
• verify a server was patched against the php-fpm path_info bug
• reproduce CVE-2019-11043 in a lab environment
• check whether fastcgi_split_path_info misconfiguration allows RCE

When to choose

• you are a security researcher or pentester testing nginx + php-fpm deployments for CVE-2019-11043
• you need a ready-made exploit to validate patching of the php-fpm misconfiguration
• you want to reproduce the vulnerability in a controlled lab

When to avoid

• you need a general-purpose vulnerability scanner rather than a single-CVE exploit
• your stack does not use nginx with php-fpm
• you lack authorization to test the target system

Facets

cli-tool · maturity maintenance

security penetration-testing cli security penetration-testing web-development windows cli cross-platform exploit cve-2019-11043 php-fpm nginx rce vulnerability-research linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="neex/phuip-fpizdam")