CVE-2019-20372

This repository contains a functional exploit for CVE-2019-20372, an HTTP request smuggling vulnerability in nginx. The exploit leverages the error_page directive to smuggle a second request, potentially bypassing access controls.

This repository contains a functional Python exploit for CVE-2019-20372, targeting Nginx versions before 1.17.7. The exploit attempts to upload a malicious PHP file via HTTP PUT request, leveraging misconfigured error_page directives to achieve unauthenticated file upload and potential remote code execution.

This repository contains a functional proof-of-concept for CVE-2019-20372, an HTTP request smuggling vulnerability in Nginx. The exploit leverages a malformed HTTP request with conflicting Content-Length headers to smuggle a secondary request, potentially accessing hidden endpoints.