Feature/CVE 2019 16278

[ybadaoui-ostorlab]

Summary

This PR introduces detection logic for CVE-2019-16278, a directory traversal vulnerability in the nostromo nhttpd server, allowing potential remote code execution.

Verification Process

• Target Verification: Identifies if a target is running nostromo by checking for the Server header in HTTP responses.
• Vulnerability Check: Sends a crafted HTTP/1.0 POST request to attempt directory traversal and command execution "THE COMMAND id". If the response contains indicators of successful command execution (e.g., uid=), the target is flagged as vulnerable.
  
  

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 96.41%. Comparing base (d457d7a) to head (c0f1655).
Report is 17 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #134      +/-   ##
==========================================
+ Coverage   96.36%   96.41%   +0.04%     
==========================================
  Files         170      172       +2     
  Lines        6028     6101      +73     
==========================================
+ Hits         5809     5882      +73     
  Misses        219      219              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Comments fixed.