http://y7egb5vi45k74makeixpfb7jnimfxm3gf233lb3ke2ldonozjk55nvad.onion/nginx_hacking.html
Alias LFI Misconfiguration Inside the Nginx configuration look the “location” statements, if
someone looks like: location /imgs {
alias /path/images/
} There is a LFI vulnerability because: /imgs../flag.txt Transforms to: /path/images/../flag.txt The correct configuration will be: location /imgs/ {
alias /path/images/
} So, if you find some Nginx server you should check for this
vulnerability.