'NGINX Config File Without Space Character
Got a quick question for your NGINX wizards out there. I'm a penetration tester and I've got a a vulnerability where I can write into a live NGINX config file and then NGINX reloads. However, I cannot write the " " character. Any idea how I can do something? I'm injecting into a proxypass context. I can leak the contents of some variables using proxypass https://myhost.com?$request_id to leak the request I'd, but all characters are lower cased so I can't get upper case variables. Any suggestions on how to leak anything of impact or write a directive without using a space?
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|