CVE-2019-20372 PoC — F5 Nginx 环境问题漏洞

Description

nginx http request smugling error_page directive

介绍

# CVE-2019-20372
 
This repository is for educational purposes only.

# /server

vulnerable server run `./server.sh`

# /exploit.py

exploit script run `python3 exploit.py`


# importante!
https://blkcipher.pl/assets/pdfs/2019-12-10-error_page_request_smuggling.pdf

https://github.com/vuongnv3389-sec/CVE-2019-20372

why this repo?

because burp doesnt catch the second response and vuongnv3389-sec's repo didnt work for me :(

文件快照

备注