Nostromo nhttpd Directory Traversal RCE

This repository contains a Python exploit script (cve-2019-16278.py) and a README.md for CVE-2019-16278, a remote code execution vulnerability in Nostromo nhttpd <= 1.9.6. The exploit works by sending a specially crafted HTTP POST request with URL-encoded CRLF characters to traverse directories and access /bin/sh on the target server. The script allows the attacker to execute arbitrary shell commands, including spawning a reverse shell. The README provides usage instructions, affected versions, and references. The exploit is operational, requiring only Python 3 and network access to a vulnerable server. The main attack vector is network-based, targeting the HTTP service exposed by Nostromo nhttpd. The endpoints of interest are the path traversal string in the HTTP request and the /bin/sh binary on the target system.

This repository contains a Python exploit script (cve2019_16278.py) targeting CVE-2019-16278, a remote code execution vulnerability in the nostromo web server version 1.9.6. The exploit works by sending a specially crafted HTTP POST request to the target server, exploiting a directory traversal flaw to access /bin/sh and execute arbitrary shell commands provided by the attacker. The script takes three arguments: the target IP, target port, and the command to execute. The output of the command is returned to the attacker. The repository also includes a README.md with a brief description and images. The exploit is operational, providing direct command execution on vulnerable targets, and is not part of a larger framework.

This repository contains a single Metasploit module (nostromo_code_exec.rb) that exploits a remote command execution vulnerability (CVE-2019-16278) in the Nostromo nhttpd web server (versions <= 1.9.6). The exploit leverages a directory traversal flaw in the HTTP request handling to access /bin/sh and execute arbitrary commands on the target system. The module supports both in-memory command execution (for Unix targets) and dropper payloads (for Linux targets), with customizable payloads such as reverse shells. The attack is performed over HTTP, requiring only network access to the vulnerable server. The code is weaponized, as it is part of the Metasploit framework and supports a variety of payloads and architectures. The main exploit file is written in Ruby and is structured according to Metasploit conventions, including check, exploit, and payload delivery routines.

This repository contains a Python proof-of-concept exploit for CVE-2019-16278, a remote code execution vulnerability in Nostromo 1.9.6 web server. The exploit leverages a directory traversal flaw to access /bin/sh on the target system via a specially crafted HTTP POST request. The attacker can specify the target IP, port, and an arbitrary shell command to execute. The exploit supports custom commands and reverse shell payloads, as demonstrated in the README. The main exploit logic is in 'exploit.py', which builds and sends the malicious HTTP request directly to the target's socket. The repository is structured simply, with a README providing usage instructions and vulnerability details, and a single Python script implementing the exploit. No detection or scanning functionality is present; this is a direct exploitation tool. The attack vector is network-based, requiring access to the target's web server port. The only fingerprintable endpoint is the use of '/bin/sh' on the target system, accessed via directory traversal.

This repository contains a Python proof-of-concept exploit for CVE-2019-16728, a remote command execution vulnerability in Nhttpd. The main file, PoC.py, is a command-line tool that takes a target URL (HTTP or HTTPS) and allows the user to interactively send arbitrary shell commands to the vulnerable server. It crafts a specially formatted HTTP POST request using path traversal sequences to access /bin/sh, then injects the user's command for execution. The exploit returns the output of the executed command. The README provides a brief description and a reference to a related exploit. The repository is structured simply, with one exploit script and a README, and is intended to demonstrate and exploit the vulnerability for testing or research purposes.

This repository contains a Python exploit script (cve-2019-16278.py) targeting CVE-2019-16278, a remote command execution vulnerability in Nostromo httpd versions prior to 1.9.6. The exploit works by sending a specially crafted HTTP request to the target server, allowing the attacker to execute arbitrary shell commands. The script takes three command-line arguments: the target host, port, and the command to execute. The README provides usage examples and demonstrates successful command execution. The repository is simple, with only two files: a README and the exploit script. The main attack vector is network-based, requiring the attacker to connect to the target's HTTP service. No hardcoded IPs or domains are present; the target is specified by the user at runtime.

This repository contains two Bash scripts exploiting critical vulnerabilities in Nostromo httpd versions 1.9.6 and earlier. The first script (CVE-2019-16278.sh) exploits a directory traversal vulnerability to achieve remote code execution by sending a specially crafted HTTP POST request to the target server, ultimately executing arbitrary shell commands via /bin/sh. The second script (CVE-2019-16279.sh) exploits a denial-of-service vulnerability by sending a large number of CRLF (\r\n) sequences to the server, causing it to crash. Both scripts require the attacker to specify the target host and port. The repository also includes a README.md with detailed explanations, usage examples, and references. The exploits are proof-of-concept quality, written in Bash, and do not rely on any external frameworks.

This repository contains a Python exploit script (nostroSploit.py) targeting CVE-2019-16278, a path traversal vulnerability in the Nostromo (nhttpd) web server that allows unauthenticated remote code execution. The exploit works by sending a specially crafted HTTP POST request to the target server, traversing directories to access /bin/sh and execute arbitrary shell commands provided by the user. The script takes the target's IP address, port, and an optional command (defaulting to 'id') as arguments. The README provides a brief usage guide and credits inspiration from a related shell script. The main exploit capability is unauthenticated remote code execution over the network. The only fingerprintable endpoint is the use of /bin/sh on the target system. The repository is simple, containing only the exploit script and a README, and is operational as it provides a working payload for exploitation.