gixy

Analyze nginx config

$ gixy [/etc/nginx/nginx.conf]

$ gixy --only-plugins [ssrf] [config.conf]

$ gixy -f json [config.conf]

$ gixy --skip-plugins [host_spoofing] [config.conf]

gixy [options] config

gixy analyzes nginx configuration files for security issues. It detects common misconfigurations that could lead to vulnerabilities like SSRF, host spoofing, and path traversal.
The tool includes plugins for various security checks and provides detailed explanations of issues found. It is used in security audits and CI pipelines to catch nginx misconfigurations before deployment.

CONFIG

Nginx configuration file.

Only run specific plugins.

Skip specific plugins.

Output format (text, json).

Display help information.

Python tool. May need updates for latest nginx features. False positives possible.

gixy was created by Yandex to automate nginx security configuration review.

nginx(1)