Hello World
Whoami
Pentest
Cloud
Antivirus Evasion - Defender
EDR BYPASS
Red Team
CTF

Powered by GitBook

On this page

Was this helpful?

Nginx

PreviousTomcat CGI NextIIS

Last updated 4 days ago

Path traversal via misconfigured NGINX alias

https://example.com/static../ returns the same response as https://example.com/

Burp extension

GitHub - bayotop/off-by-slash: Burp extension to detect alias traversal via NGINX misconfiguration at scale.GitHub

NginxHackTricks

Path traversal via misconfigured NGINX alias - Vulnerabilities - AcunetixAcunetix