nginx-host绕过实例复现

目录

 数据库配置

创建库、表

测试

绕过host限制

nginx ssl

创建存放证书的目录

配置ssl模块

 修改后重启

---

mkdir -p /var/www/aaa/

 /usr/local/nginx/conf/nginx.conf

     server {
        listen       80;
        server_name  www.aaa.com;
        root "/var/www/aaa/nginxhost/web";
        index index.html index.php;

        location / {
        try_files $uri $uri/ /index.php;
        }
        location ~ \.php(.*)$ {
            fastcgi_pass   127.0.0.1:9000;
            fastcgi_index  index.php;
            fastcgi_split_path_info  ^((?U).+\.php)(/?.+)$;
            fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
            fastcgi_param  PATH_INFO  $fastcgi_path_info;
            fastcgi_param  PATH_TRANSLATED  $document_root$fastcgi_path_info;
            include        fastcgi_params;
        }

    }
# /usr/local/nginx/sbin/nginx -t
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
# /usr/local/nginx/sbin/nginx

修改本机host文件
192.168.20.129 www.aaa.com

 上传pwnhub

 数据库配置

 

[root@localhost nginxhost]# cd /var/www/aaa/nginxhost

mysql> create database security;
Query OK, 1 r