Reverse Proxy Misconfigurations · passage 8 of 9

Missing Root Location

1 code block · Reverse Proxy Misconfigurations/README.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

The `root /etc/nginx;` directive sets the server's root directory for static files. The configuration doesn't have a root location `/`, it will be set globally set. A request to `/nginx.conf` would resolve to `/etc/nginx/nginx.conf`.

server {
  root /etc/nginx;

  location /hello.txt {
    try_files $uri $uri/ =404;
    proxy_pass http://127.0.0.1:8080/;
  }
}

Every one of the 9 is a mark on the map. Named now: 1 to 9, reading order first.

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.