From 3408b5894a847e5e2f2fd66667bccb5a050f0e58 Mon Sep 17 00:00:00 2001 From: Spl99 Date: Wed, 24 May 2023 12:52:12 -0400 Subject: [PATCH] Update nginxpwner.py Fixes issue with script that prevented it seeing certain nginx version number (spotted this issue when checking nginx 1.18.0) --- nginxpwner.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nginxpwner.py b/nginxpwner.py index ccc9261..5947865 100644 --- a/nginxpwner.py +++ b/nginxpwner.py @@ -37,7 +37,7 @@ nginx_version = "https://github.com/nginx/nginx/tags" try: - target_nginx_version = basereq.headers["Server"].split("/")[1] + target_nginx_version = re.findall(r"\d+\.\d+\.\d+", basereq.headers["Server"])[0] except: print(f"{Fore.RED}No Server header found or invalid Server header. If you are sure that your target uses Nginx, it may happen either you are testing something built with NGINX or that a simple NGINX server has the server_tokens directive set to off. In any case, please use nginx-pwner-no-server-header.py") sys.exit()