Well shit, so i'm doing a tool that checks a site for dangerous http responce, as in shellshock attacks etc but whenever i try to make it so i get a raw http responce
it does get me the content but it doesn't goddamm show the rest of the content so like
Example of what i get:
HTTP/1.1 200 OK
Date: Fri, 24 Aug 2018 04:11:14 GMT
Server: Apache/2.2.21 (Unix) DAV/2
Last-Modified: Thu, 25 Sep 2014 09:56:50 GMT
ETag: "1ebf-6a8-503e0d1bdfc80"
Accept-Ranges: bytes
Content-Length: 1704
Connection: close
Content-Type: text/html
X-Pad: avoid browser bug
What i should get:
HTTP/1.1 200 OK
Date: Fri, 24 Aug 2018 03:42:08 GMT
Server: Apache/2.2.21 (Unix) DAV/2
PING 8.8.8.8 (8.8.8.8): 56 data bytes
64 bytes from 8.8.8.8: seq=0 ttl=115 time=56.815 ms, seq=1 ttl=115 tim
+e=55.693 ms, seq=2 ttl=115 time=59.925 ms
Connection: close
Content-Type: text/plain
Content-Length: 139
--- 8.8.8.8 ping statistics ---
3 packets transmitted, 3 packets received, 0% packet loss
round-trip min/avg/max = 55.693/57.477/59.925 ms
That user-agent i used it to test if the server is vulnerable to shellshock and then alert the user, the thing is... i don't get what i'm suppose to get....
So how did i get the second one? I used BurpSuite and tool that acts like a http proxy etc...
But yeah can anyone please help me?
-
Are you posting in the right place? Check out Where do I post X? to know for sure.
-
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big>
<blockquote> <br /> <dd>
<dl> <dt> <em> <font>
<h1> <h2> <h3> <h4>
<h5> <h6> <hr /> <i>
<li> <nbsp> <ol> <p>
<small> <strike> <strong>
<sub> <sup> <table>
<td> <th> <tr> <tt>
<u> <ul>
-
Snippets of code should be wrapped in
<code> tags not
<pre> tags. In fact, <pre>
tags should generally be avoided. If they must
be used, extreme care should be
taken to ensure that their contents do not
have long lines (<70 chars), in order to prevent
horizontal scrolling (and possible janitor
intervention).
-
Want more info? How to link
or How to display code and escape characters
are good places to start.