Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-41741 PoC — NGINX ngx_http_mp4_module vulnerability CVE-2022-41741

Source
https://github.com/dumbbutt0/evilMP4
Associated Vulnerability
Title:NGINX ngx_http_mp4_module vulnerability CVE-2022-41741 (CVE-2022-41741)
Description:NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngx_http_mp4_module that might allow a local attacker to corrupt NGINX worker memory, resulting in its termination or potential other impact using a specially crafted audio or video file. The issue affects only NGINX products that are built with the ngx_http_mp4_module, when the mp4 directive is used in the configuration file. Further, the attack is possible only if an attacker can trigger processing of a specially crafted audio or video file with the module ngx_http_mp4_module.
Description
Explore CVE-2022-41741 with the Evil MP4 repository. It offers educational PoCs,and documentation on securing nginx against MP4 file vulnerabilities. For legal, ethical security testing only.
Readme
# evilMP4
Explore CVE-2022-41741 with the Evil MP4 repository. It offers educational PoCs, and detailed documentation on securing nginx against MP4 file vulnerabilities. For legal, ethical security testing only.

This repository provides tools, documentation, and examples for understanding and demonstrating CVE-2022-41741, an out-of-bounds read vulnerability in the ngx_http_mp4_module of nginx. The vulnerability can allow attackers to gain unauthorized access to potentially sensitive information or perform a denial of service attack by processing specially crafted MP4 files.

# Repository Contents
Proof of Concept (PoC): Scripts and instructions for creating and using malicious MP4 files that exploit CVE-2022-41741.
Documentation: Detailed explanation of CVE-2022-41741, including how the vulnerability works, its potential impact, and mitigation strategies.
Mitigation: Guidelines and scripts to help secure nginx installations against this vulnerability.
Test Cases: Examples of both vulnerable and non-vulnerable configurations for educational and testing purposes.

# Purpose
The primary goals of this repository are:

Education: To educate users and developers about the nature of CVE-2022-41741, demonstrating how such vulnerabilities can be identified and exploited.
Security Testing: To provide security researchers and system administrators with tools to test their systems for this specific vulnerability.
Mitigation Strategies: To offer practical mitigation techniques and configurations to protect nginx servers from similar vulnerabilities.
How to Use This Repository
Setup: Follow the setup instructions to install any required dependencies and configure your environment.
Running PoCs: Use the provided scripts to generate and deploy Evil MP4 files in a controlled, ethical, and legal testing environment.
Applying Mitigation: Implement the recommended mitigation strategies on your nginx installations to protect against CVE-2022-41741.

# Contribution
Contributions to this repository are welcome! Whether it's refining the PoC, expanding the documentation, or improving the mitigation strategies, your input is valuable. Please submit pull requests or open issues to propose changes or report bugs.

# License
This project is licensed under the MIT License - see the LICENSE file for details.

# Disclaimer
The tools and techniques described in this repository are for educational and legal security testing purposes only. Usage of these tools and techniques against unauthorized systems is strictly prohibited. The repository maintainers are not responsible for any misuse or damage caused by this content.
File Snapshot

 [4.0K]  /data/pocs/ca01f2ac9143be9fc15c7ee0dfddc79b62d5bf3a
├── [1.3K]  evilmp4.py
├── [1.0K]  LICENSE
├── [ 765]  mp4.py
├── [2.6K]  README.md
├── [  18]  requirements.txt
└── [1.2K]  usage.md

0 directories, 6 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →