Questions tagged [http]

All about programs and services that use the Hypertext Transfer Protocol.

Filter by
Sorted by
Tagged with
1 vote
0 answers
29 views

SQL Injection Over HTTPS: Is It Possible? [closed]

I'm new to the infosec community and am taking the eJPT cert/course right now, and I've just found out about SQL injections. What I'm wondering, however, is in the infosec world, is there ever a use ...
0 votes
1 answer
72 views

Some secret service is taking over port 80... I can't identify which one?

I have an nginx service that resides on ports 80 and 443 and has done som for years. Yesterday I suddenly just got a plain text page with a 404 page not found message Headers: HTTP/2 404 content-type: ...
  • 151
0 votes
0 answers
23 views

Error Trying to load http url using curl

I am beginner. I am trying to load HTTP URL using curl in my Ubuntu terminal. The command I am using is curl -L 'http://google.com' But instead of getting source code. I am getting below error curl: ...
1 vote
0 answers
31 views

apache2 crit error file util_ldap.c, line 85, assertion "0" failed

I have simple webservice with one index.html file with hello world And I'm trying to make this website accessible only with LDAP authentication, but when I trying to access website errors start occur....
0 votes
0 answers
74 views

how to reverse proxy with caddy using digital ocean load balancer

Currently have a load balancer with IP: 164.90.xxx.xxx on digital ocean. This loadbalancer has droplet (server with IP 143.110.xxx.xxx) inside this droplet I'm running a node app runs on localhost:...
  • 1
0 votes
2 answers
33 views

why iptables commands yield seemingly contradictory results on my embeded Linux?

I'm running an Embedded Linux system, whose kernel is 3.18.21, with some applications on top it on MIPS. When I run iptables & ip6tables on the Linux, such as the following: iptables -A INPUT -p ...
0 votes
0 answers
90 views

How to redirect all http traffic to Burp Suite?

How to redirect all HTTP requests to Burb Suite? I am using a Ubuntu OS running on VM installed on my macOS machine, and I have tried the following IPTables commands to do that, without success: sudo ...
0 votes
1 answer
28 views

How does it works the "HTTP 101 Protocols Switching" in a client server communication?

I'm developing a web site that is served by the web server NGINX installed on a Linux platform. One of the service provided by the web site is base on a WebSocket backend server. To be more specific ...
1 vote
1 answer
1k views

Curl returning with no response and does not wait for `wait=x seconds`

I call an async service that takes ~80 seconds to respond. I run: curl -v -X POST https://hostname.com/service/v2/predict \ -H 'x-api-key: somekey' \ -H 'x-request-id: longfiles' \ -H "...
1 vote
0 answers
16 views

Has the target of a HTTP CONNECT tunnel to be reachable from both client and proxy?

I am trying to tunnel ssh via HTTP. My apache virtual host config looks as follows: <VirtualHost *:443> ServerName proxy.example.org ProxyRequests On AllowCONNECT 22 <Proxy *&...
  • 11
0 votes
1 answer
44 views

How to define HTTP_PROXY uppercase as http_proxy lowercase in macos?

How to define HTTP_PROXY uppercase as http_proxy lowercase in macos? Is there a way to set HTTP_PROXY to work similarly as http_proxy?
1 vote
0 answers
269 views

Upload file to SFTP directly from HTTP using cURL

I am struggling with uploading a file to an SFTP from a URL. All steps work independently but when I combine them they seem to be split into two separate tasks, downloading the file and then ...
0 votes
1 answer
332 views

Intercept and edit http requests on the fly

Is there a tool that'll let me programatically inspect and edit http requests being emitted from my box on the fly? I'm hoping to create the ability to access mirrors of commonly downloaded files when ...
1 vote
2 answers
179 views

Print output of httpie command, then pipe to grep

how can I print output of httpie request then pipe to grep to check if request has succeeded or failed? http --print=hb POST http://localhost:8080 | grep -c "HTTP/1.1 200" && echo &...
0 votes
1 answer
211 views

how to make sure the proxy works or not in macOS iterm

Now I am set the proxy in .zshrc like this: alias proxy='export all_proxy=socks5://127.0.0.1:7890' and check using the env command in terminal, shows the proxy env value like this: all_proxy=socks5://...
  • 469
0 votes
0 answers
94 views

BAD REQUEST when using iptables for a captive portal on raspberry pi

I have my raspberry pi setup as a wireless access point by following the documentation on the official site https://www.raspberrypi.com/documentation/computers/configuration.html#setting-up-a-routed-...
0 votes
1 answer
23 views

How do I set up my raspberry pi so that I can connect to its ip address via a domain

Let me explain what I want to happen. I have an http server program that displays a website every time I connect to my raspberry pi's ip address on port 8080. But this only works on my current network....
  • 35
0 votes
0 answers
165 views

firewalld not blocking http and https access

I am running a httpd container on this machine, but http or https aren't enabled on firewalld. But I can still access the website from another machine that is on the same network. Why is this behavior?...
0 votes
1 answer
2k views

Curl Parallel requests using links source file

I have this script to go through a list of URLs and the check return codes using Curl. Links file goes like this: https://link1/... https://link2/... https://link200/... (...) The script: INDEX=0 DIR=...
  • 155
0 votes
1 answer
182 views

Server responses with IP Address instead of host name

I have a Backend which is used as a REST API. When I make a request to the server (GET https://subdomain.server.com/users/all) I get this response from the server: GET https://87.69.152.36/users/all ...
  • 1
1 vote
0 answers
1k views

why could access url using curl but faild in the google chrome broswer

I am config the localhost url in the nginx on macOS like this: ➜ nginx git:(master) cat conf.d/reddwarf-admin.conf server { listen 8083; server_name admin.reddwarf.com; ...
  • 469
0 votes
1 answer
264 views

Streaming audio files over HTTP with Media Player Daemon fails - 'Not found'

I'm trying to set up a simple MPD instance to stream audio files over HTTP. What I'd like to be able to do is put in a URL in my browser, which will stream the audio file - as simple as possible. I've ...
  • 1
0 votes
0 answers
107 views

since when CentOS has a welcome page with the default http server

On my network, I have many CentOS VMs with various versions dating from very recently to 10-15 years ago. For some of them I don't have credentials but I want to check if I should keep them by the ...
0 votes
1 answer
42 views

How to obtain data from a site that uses javascript?

What I want is to query metallum to obtain a plain list of songs that contain x word, let's say spider, so the query for the browser would be https://www.metal-archives.com/search?searchString=spider&...
  • 21
0 votes
1 answer
540 views

Open URL as if with browser from command line

I am having roughly the same problem as in this question, where the problem is, there is a certain URL that, when called in the browser, will download a file, but when called from the command line ...
  • 125
0 votes
1 answer
4k views

Return status code and body in curl

Is it possible to use curl to call a REST service (POST method) and get: The HTTP status code. The response body. Other information like headers, methods, etc. are not relevant for my use case and ...
0 votes
0 answers
66 views

Sniffing traffic at embedded linux

Are there any sniffers out there? I'm looking for something that can be compiled for an embedded device. Important: I'm not limited in space. Therefore it can be any-size sniffer that can be compiled ...
1 vote
0 answers
1k views

How to use curl to access a webpage behind a login form?

There is this webpage I'm trying to scrape but it is behind a login form that needs user/password. I used Firefox debug mode to find HTTP requests. Upon entering the credentials, there is a POST ...
-1 votes
1 answer
97 views

Why can't http be changed to https in ubuntu?

Why can't http be changed to https in ubuntu? Err:1 https://ports.ubuntu.com/ubuntu-ports focal InRelease Could not connect to ports.ubuntu.com:443 (91.189.91.38). - connect (111: Connection refused)...
1 vote
1 answer
121 views

Website served on port 80 unreachable from my phone in the local subnet

I'm building a website on my laptop. To see how it renders, I serve it locally on port 80 with lighttpd. I can then open it in my laptop's browser via any IP or URL referring to the laptop http://...
  • 1,453
0 votes
0 answers
75 views

Is it real to redirect http request like this?

e.g. Main server runs nginx and checks http request hostname. If hostname matches exampleX.com - redirects to needed local server with its own nginx on board. Local server returns page content. Is it ...
0 votes
0 answers
364 views

Compiling curl with http3 - stuck on step with ngtcp2

I'm trying to compile curl with the experimental http3/quic stack. I've read and followed cookbook examples in a couple of places (most specifically here(https://github.com/curl/curl/blob/master/docs/...
1 vote
1 answer
4k views

How to send curl request with post data imported from a file

I have a below curl command which works fine and I get the response back. I am posting json data to an endpoint which gives me response back after hitting it. curl -v 'url' -H 'Accept-Encoding: gzip, ...
1 vote
1 answer
650 views

PHP shell_exec() Command not found

I need to execute a program using php, the file in question is ClustalW (clustalw2). My apache user is http using fish shell, so I moved clustalw2 to /srv/http/Clustal and added the dir to fish path. ...
-1 votes
1 answer
49 views

Can an open port be hacked to get access to the command line?

Assume I run a custom app on an arbitrary port on a linux box - let's say 7890. This is a go language web server. Runs an app on top of HTTP. No HTTPS. It runs as a dedicated but "normal" ...
1 vote
1 answer
282 views

How do I serve *nothing* on a server's bare IP with Apache2 virtual hosts?

I am hosting several project sites on a machine running Apache. Of course I am using virtual hosts and they work as expected. However, currently accessing the bare IP of the machine yields the first ...
0 votes
1 answer
27 views

nginx re-direct to API server in EC2

I have an EC2 server (in Private subnet) from where I run some Python microservice. From my application running on an Apps EC2 (in public subnet) I am trying to access the Python microservices. I ...
0 votes
1 answer
304 views

Ubuntu sudo required for listening on port 80 but not on other unused ports

On my Ubuntu desktop, I'm able to successfully run a small C++ webserver on unused ports like this: ./myserver 127.0.0.1 3050 This problem is that if I run on port 80, I must run as sudo like this: ...
0 votes
1 answer
751 views

How do I ssh into a server over HTTPs?

I have a server that has a reverse proxy (NGINX) set up to host all my other websites/services on a single server. I would like to create a way to SSH into that server over HTTP. The reason I need to ...
1 vote
1 answer
2k views

Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?

I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration: frontend haproxynode bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1 mode tcp ...
0 votes
1 answer
1k views

Why does curl -k -I https://host.example.com not return response headers if certificate is not valid?

Does anyone know why curl with -k (--insecure) option and -I for show headers still shows the html response and not the headers as expected? Working as expected: $ curl -I https://validsslcert.example....
0 votes
0 answers
60 views

website STILL need to redirect from HTTP to https after Nginx redirect config

I use AWS EC2 to build a website using load balancer. However, the pentesting result shows that the website still could be reached by http. I have checked that in the Nginx config file, we does have a ...
  • 1
0 votes
2 answers
74 views

New iptables NAT produces Error 400 Bad Request for Other HTTP Requests

All: Recently, I added several new iptables (RE: code snippet below) rules to route traffic through my VPN (0x1000/0x1000) for a specific destination (172.67.168.48) over port 443. The new rules NAT ...
0 votes
0 answers
2k views

Centos 8 apache kerberos authentication sso

For some reason I am unable to authenticate via sso to internal website when you connect it directly via cname. Centos linux is joined in the domain itself. What happens is that when I enter the ...
  • 1
0 votes
0 answers
2k views

HTTP request sent, awaiting response... 400 Bad Request on using wget for downloading dropbox files in CentOS

The file is around 447MB. I cannot download it using the following command in CentOS. How can I download https://www.dropbox.com/sh/6yd1ygtyc3yd981/AABVeEqzC08YQv4UZk7lNHvya?dl=0&preview=CIFAR-FS....
0 votes
1 answer
657 views

lighttpd won't start even with the right permissions

systemctl status lighttpd ● lighttpd.service - Lightning Fast Webserver With Light System Requirements Loaded: loaded (/usr/lib/systemd/system/lighttpd.service; enabled; vendor preset: disabled) ...
  • 1,702
1 vote
1 answer
2k views

wget not downloading files with 304 Not Modified

I'm trying to download a website recursively using wget: wget --recursive --page-requisites --no-parent --convert-links -e robots=off --domains orteil.dashnet.org orteil.dashnet.org/cookieclicker It ...
  • 193
1 vote
1 answer
1k views

Downloading file on Linux shell from an interactive http site using curl wget

I am trying to download a file form a HTTP website from my Linux shell using wget and curl. Below is the manual GUI process of doing it: Once I click on the Link-A, it redirects me to a different ...
1 vote
1 answer
2k views

How to run Python 3 http.server on port 80 without root?

I want to run Python 3 http.server on port 80, without running it as root and without installing any extra software (e.g., authbind). I'm using Arch Linux. I would prefer to do this with systemd and ...
  • 16.5k
2 votes
0 answers
799 views

One line HTTP Proxy command?

Is there a simple, one-line command to run a HTTP Proxy? There are several one-line commands “serve this directory over HTTP” (e.g. python -m SimpleHTTPServer). Is there any command, or one-liner, for ...
  • 1,136

1
2 3 4 5 6