stylersnico / httpoxy-killer

Fix the HTTPOXY vulnerability on your webserver

HTTPOXY-KILLER

##License Script for fixing the HTTPOXY Vulnerability on Debian, RHEL and FreeBSD systems (Apache and NGINX)

Based on : https://www.howtoforge.com/tutorial/httpoxy-protect-your-server/

Copyleft (C) Nicolas Simond - 2016

This script is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.

This script is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this script. If not, see http://www.gnu.org/licenses/gpl.txt

##About this script Script for fixing the HTTPOXY Vulnerability on Debian and RHEL systems (Apache and NGINX)

Tested on :

• Ubuntu 16.04
• Debian 8.5
• CentOS 7.11
• FreeBSD 10.2

With :

• Apache 2.4.18-2ubuntu3 (Ubuntu)
• NGINX 1.9.15-0ubuntu1 (Ubuntu)
• Apache 2.4.10-10+deb8u4 (Debian)
• NGINX 1.6.2-5+deb8u1 (Debian)
• HTTPD 2.4.6-40.el7.centos.4 (CentOS)
• NGINX nginx.x86_64 1:1.6.3-9.el7 (CentOS)
• Apache apache24-2.4.23 (freeBSD)
• NGINX nginx-1.10.1,2 (freeBSD)

##Dependencies

• BASH
• WGET
• Apache and/or NGINX

##Designed for Debian/RHEL/FreeBSD based systems

##Installation

For Debian based systems :

cd /tmp && wget --no-check-certificate -q https://raw.githubusercontent.com/stylersnico/HTTPOXY-KILLER/master/httpoxy-fix.debian.sh && chmod +x httpoxy-fix.debian.sh && ./httpoxy-fix.debian.sh

For RHEL based systems :

cd /tmp && wget --no-check-certificate https://raw.githubusercontent.com/stylersnico/HTTPOXY-KILLER/master/httpoxy-fix.rhel.sh && chmod +x httpoxy-fix.rhel.sh && ./httpoxy-fix.rhel.sh

For FreeBSD based systems :

sudo pkg install wget bash

cd /tmp && wget --no-check-certificate https://raw.githubusercontent.com/stylersnico/HTTPOXY-KILLER/master/httpoxy-fix.freebsd.sh && sudo chmod +x httpoxy-fix.freebsd.sh && sudo bash httpoxy-fix.freebsd.sh

##Test

Use https://httpoxy.rehmann.co/