Link Search Menu Expand Document

frontend is reverse-proxy apache, backend is java:

https://mobileiron/mifs/.;/services/someService

Or, if

GET /admin/

Then we is may be bypassible with

GET /admin;/

This may be done using burpsuite match/replace


40397ac9 (main) : 2023-01-11T20:40:16+01:00