frontend is reverse-proxy apache, backend is java:
https://mobileiron/mifs/.;/services/someService
Or, if
GET /admin/
Then we is may be bypassible with
GET /admin;/
This may be done using burpsuite match/replace
frontend is reverse-proxy apache, backend is java:
https://mobileiron/mifs/.;/services/someService
Or, if
GET /admin/
Then we is may be bypassible with
GET /admin;/
This may be done using burpsuite match/replace