Hunt NGINX Proxies - Damn Vulnerable NGINX Proxy

Hello all, If you do bug bounty hunting or pentests you surely came across many hosts served from an NGINX server, in this lab (published to OWASP) I combined over 20 misconfigurations found in real world bug disclosures and both classic and novel security research, with an extensive blog where I explained everything you need to level up your NGINX hunting game. Feel free to check it out, give it a star on Github if you like it, and suggest any ideas you want me to add/fix... https://vwad.owasp.org/app/damn-vulnerable-nginx-proxy-dvnp/ Happy hunting! submitted by /u/OilOverall4190 [link] [comments]