\relax \providecommand\hyper@newdestlabel[2]{} \providecommand\babel@aux[2]{} \@nameuse{bbl@beforestart} \providecommand\HyperFirstAtBeginDocument{\AtBeginDocument} \HyperFirstAtBeginDocument{\ifx\hyper@anchor\@undefined \global\let\oldcontentsline\contentsline \gdef\contentsline#1#2#3#4{\oldcontentsline{#1}{#2}{#3}} \global\let\oldnewlabel\newlabel \gdef\newlabel#1#2{\newlabelxx{#1}#2} \gdef\newlabelxx#1#2#3#4#5#6{\oldnewlabel{#1}{{#2}{#3}}} \AtEndDocument{\ifx\hyper@anchor\@undefined \let\contentsline\oldcontentsline \let\newlabel\oldnewlabel \fi} \fi} \global\let\hyper@last\relax \gdef\HyperFirstAtBeginDocument#1{#1} \providecommand\HyField@AuxAddToFields[1]{} \providecommand\HyField@AuxAddToCoFields[2]{} \babel@aux{english}{} \@writefile{toc}{\contentsline {section}{\numberline {1}Introduction}{1}{section.1}\protected@file@percent } \@writefile{toc}{\contentsline {subsection}{\numberline {1.1}CVE-2024-38477 }{1}{subsection.1.1}\protected@file@percent } \@writefile{toc}{\contentsline {subsection}{\numberline {1.2}How apache works}{2}{subsection.1.2}\protected@file@percent } \@writefile{toc}{\contentsline {section}{\numberline {2}Deep dive into the code}{2}{section.2}\protected@file@percent } \@writefile{toc}{\contentsline {subsection}{\numberline {2.1}Proxy module}{2}{subsection.2.1}\protected@file@percent } \@writefile{toc}{\contentsline {subsubsection}{\numberline {2.1.1}Parsing URI}{3}{subsubsection.2.1.1}\protected@file@percent } \@writefile{toc}{\contentsline {subsubsection}{\numberline {2.1.2}Override the hostname}{4}{subsubsection.2.1.2}\protected@file@percent } \@writefile{toc}{\contentsline {section}{\numberline {3}Scenarios}{5}{section.3}\protected@file@percent } \@writefile{toc}{\contentsline {subsection}{\numberline {3.1}Setup the lab}{5}{subsection.3.1}\protected@file@percent } \@writefile{toc}{\contentsline {subsection}{\numberline {3.2}Perl backend}{5}{subsection.3.2}\protected@file@percent } \@writefile{toc}{\contentsline {subsubsection}{\numberline {3.2.1}Attack with Python}{6}{subsubsection.3.2.1}\protected@file@percent } \@writefile{toc}{\contentsline {subsubsection}{\numberline {3.2.2}Attack with BurpSuite}{7}{subsubsection.3.2.2}\protected@file@percent } \@writefile{toc}{\contentsline {section}{\numberline {4}Mitigation}{8}{section.4}\protected@file@percent } \gdef \@abspage@last{8}