A Shellshocked blocking module for NGINX
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
script
spec
.gitignore
.rspec
.travis.yml
Gemfile
Gemfile.lock
README.md
Rakefile
ci.sh
config
nginx.conf
ngx_http_shellshocked_module.c

README.md

ngx_shellshocked Build Status

This project is an NGINX module designed to block the Shellshocked payload when presented to the server. The module currently checks the host and referer headers for the payload. To enable the module set shellshocked on in the main conf section of your NGINX configuration. The following example demonstrates the configuration.

events {
  worker_connections 1024;
}

http {
  shellshocked on;

  server {
    listen 8888;
    location / {

    }
  }
}