Questions tagged [http]
All about programs and services that use the Hypertext Transfer Protocol.
298
questions
1
vote
0
answers
29
views
SQL Injection Over HTTPS: Is It Possible? [closed]
I'm new to the infosec community and am taking the eJPT cert/course right now, and I've just found out about SQL injections. What I'm wondering, however, is in the infosec world, is there ever a use ...
- 11
0
votes
1
answer
72
views
Some secret service is taking over port 80... I can't identify which one?
I have an nginx service that resides on ports 80 and 443 and has done som for years. Yesterday I suddenly just got a plain text page with a 404 page not found message
Headers:
HTTP/2 404
content-type: ...
- 151
0
votes
0
answers
23
views
Error Trying to load http url using curl
I am beginner. I am trying to load HTTP URL using curl in my Ubuntu terminal.
The command I am using is
curl -L 'http://google.com'
But instead of getting source code. I am getting below error
curl: ...
1
vote
0
answers
31
views
apache2 crit error file util_ldap.c, line 85, assertion "0" failed
I have simple webservice with one index.html file with hello world
And I'm trying to make this website accessible only with LDAP authentication, but when I trying to access website errors start occur....
- 11
0
votes
0
answers
74
views
how to reverse proxy with caddy using digital ocean load balancer
Currently have a load balancer with IP: 164.90.xxx.xxx on digital ocean. This loadbalancer has droplet (server with IP 143.110.xxx.xxx) inside this droplet I'm running a node app runs on localhost:...
- 1
0
votes
2
answers
33
views
why iptables commands yield seemingly contradictory results on my embeded Linux?
I'm running an Embedded Linux system, whose kernel is 3.18.21, with some applications on top it on MIPS. When I run iptables & ip6tables on the Linux, such as the following:
iptables -A INPUT -p ...
- 83
0
votes
0
answers
90
views
How to redirect all http traffic to Burp Suite?
How to redirect all HTTP requests to Burb Suite?
I am using a Ubuntu OS running on VM installed on my macOS machine, and I have tried the following IPTables commands to do that, without success:
sudo ...
- 3
0
votes
1
answer
28
views
How does it works the "HTTP 101 Protocols Switching" in a client server communication?
I'm developing a web site that is served by the web server NGINX installed on a Linux platform. One of the service provided by the web site is base on a WebSocket backend server.
To be more specific ...
- 171
1
vote
1
answer
1k
views
Curl returning with no response and does not wait for `wait=x seconds`
I call an async service that takes ~80 seconds to respond. I run:
curl -v -X POST https://hostname.com/service/v2/predict \
-H 'x-api-key: somekey' \
-H 'x-request-id: longfiles' \
-H "...
- 4,437
1
vote
0
answers
16
views
Has the target of a HTTP CONNECT tunnel to be reachable from both client and proxy?
I am trying to tunnel ssh via HTTP. My apache virtual host config looks as follows:
<VirtualHost *:443>
ServerName proxy.example.org
ProxyRequests On
AllowCONNECT 22
<Proxy *&...
- 11
0
votes
1
answer
44
views
How to define HTTP_PROXY uppercase as http_proxy lowercase in macos?
How to define HTTP_PROXY uppercase as http_proxy lowercase in macos?
Is there a way to set HTTP_PROXY to work similarly as http_proxy?
- 3
1
vote
0
answers
269
views
Upload file to SFTP directly from HTTP using cURL
I am struggling with uploading a file to an SFTP from a URL. All steps work independently but when I combine them they seem to be split into two separate tasks, downloading the file and then ...
0
votes
1
answer
332
views
Intercept and edit http requests on the fly
Is there a tool that'll let me programatically inspect and edit http requests being emitted from my box on the fly?
I'm hoping to create the ability to access mirrors of commonly downloaded files when ...
- 105
1
vote
2
answers
179
views
Print output of httpie command, then pipe to grep
how can I print output of httpie request then pipe to grep to check if request has succeeded or failed?
http --print=hb POST http://localhost:8080 | grep -c "HTTP/1.1 200" && echo &...
- 113
0
votes
1
answer
211
views
how to make sure the proxy works or not in macOS iterm
Now I am set the proxy in .zshrc like this:
alias proxy='export all_proxy=socks5://127.0.0.1:7890'
and check using the env command in terminal, shows the proxy env value like this:
all_proxy=socks5://...
- 469
0
votes
0
answers
94
views
BAD REQUEST when using iptables for a captive portal on raspberry pi
I have my raspberry pi setup as a wireless access point by following the documentation on the official site https://www.raspberrypi.com/documentation/computers/configuration.html#setting-up-a-routed-...
0
votes
1
answer
23
views
How do I set up my raspberry pi so that I can connect to its ip address via a domain
Let me explain what I want to happen.
I have an http server program that displays a website every time I connect to my raspberry pi's ip address on port 8080. But this only works on my current network....
- 35
0
votes
0
answers
165
views
firewalld not blocking http and https access
I am running a httpd container on this machine, but http or https aren't enabled on firewalld. But I can still access the website from another machine that is on the same network. Why is this behavior?...
- 19
0
votes
1
answer
2k
views
Curl Parallel requests using links source file
I have this script to go through a list of URLs and the check return codes using Curl.
Links file goes like this:
https://link1/...
https://link2/...
https://link200/...
(...)
The script:
INDEX=0
DIR=...
- 155
0
votes
1
answer
182
views
Server responses with IP Address instead of host name
I have a Backend which is used as a REST API. When I make a request to the server (GET https://subdomain.server.com/users/all) I get this response from the server:
GET https://87.69.152.36/users/all
...
- 1
1
vote
0
answers
1k
views
why could access url using curl but faild in the google chrome broswer
I am config the localhost url in the nginx on macOS like this:
➜ nginx git:(master) cat conf.d/reddwarf-admin.conf
server {
listen 8083;
server_name admin.reddwarf.com;
...
- 469
0
votes
1
answer
264
views
Streaming audio files over HTTP with Media Player Daemon fails - 'Not found'
I'm trying to set up a simple MPD instance to stream audio files over HTTP. What I'd like to be able to do is put in a URL in my browser, which will stream the audio file - as simple as possible.
I've ...
- 1
0
votes
0
answers
107
views
since when CentOS has a welcome page with the default http server
On my network, I have many CentOS VMs with various versions dating from very recently to 10-15 years ago. For some of them I don't have credentials but I want to check if I should keep them by the ...
- 101
0
votes
1
answer
42
views
How to obtain data from a site that uses javascript?
What I want is to query metallum to obtain a plain list of songs that contain x word, let's say spider, so the query for the browser would be https://www.metal-archives.com/search?searchString=spider&...
- 21
0
votes
1
answer
540
views
Open URL as if with browser from command line
I am having roughly the same problem as in this question, where the problem is, there is a certain URL that, when called in the browser, will download a file, but when called from the command line ...
- 125
0
votes
1
answer
4k
views
Return status code and body in curl
Is it possible to use curl to call a REST service (POST method) and get:
The HTTP status code.
The response body.
Other information like headers, methods, etc. are not relevant for my use case and ...
- 103
0
votes
0
answers
66
views
Sniffing traffic at embedded linux
Are there any sniffers out there? I'm looking for something that can be compiled for an embedded device.
Important: I'm not limited in space. Therefore it can be any-size sniffer that can be compiled ...
1
vote
0
answers
1k
views
How to use curl to access a webpage behind a login form?
There is this webpage I'm trying to scrape but it is behind a login form that needs user/password.
I used Firefox debug mode to find HTTP requests. Upon entering the credentials, there is a POST ...
-1
votes
1
answer
97
views
Why can't http be changed to https in ubuntu?
Why can't http be changed to https in ubuntu?
Err:1 https://ports.ubuntu.com/ubuntu-ports focal InRelease
Could not connect to ports.ubuntu.com:443 (91.189.91.38). - connect (111: Connection refused)...
- 130
1
vote
1
answer
121
views
Website served on port 80 unreachable from my phone in the local subnet
I'm building a website on my laptop. To see how it renders, I serve it locally on port 80 with lighttpd. I can then open it in my laptop's browser via any IP or URL referring to the laptop http://...
- 1,453
0
votes
0
answers
75
views
Is it real to redirect http request like this?
e.g. Main server runs nginx and checks http request hostname. If hostname matches exampleX.com - redirects to needed local server with its own nginx on board. Local server returns page content. Is it ...
0
votes
0
answers
364
views
Compiling curl with http3 - stuck on step with ngtcp2
I'm trying to compile curl with the experimental http3/quic stack. I've read and followed cookbook examples in a couple of places (most specifically here(https://github.com/curl/curl/blob/master/docs/...
1
vote
1
answer
4k
views
How to send curl request with post data imported from a file
I have a below curl command which works fine and I get the response back. I am posting json data to an endpoint which gives me response back after hitting it.
curl -v 'url' -H 'Accept-Encoding: gzip, ...
- 37
1
vote
1
answer
650
views
PHP shell_exec() Command not found
I need to execute a program using php, the file in question is ClustalW (clustalw2). My apache user is http using fish shell, so I moved clustalw2 to /srv/http/Clustal and added the dir to fish path.
...
- 23
-1
votes
1
answer
49
views
Can an open port be hacked to get access to the command line?
Assume I run a custom app on an arbitrary port on a linux box - let's say 7890.
This is a go language web server. Runs an app on top of HTTP. No HTTPS. It runs as a dedicated but "normal" ...
- 253
1
vote
1
answer
282
views
How do I serve *nothing* on a server's bare IP with Apache2 virtual hosts?
I am hosting several project sites on a machine running Apache. Of course I am using virtual hosts and they work as expected. However, currently accessing the bare IP of the machine yields the first ...
- 13
0
votes
1
answer
27
views
nginx re-direct to API server in EC2
I have an EC2 server (in Private subnet) from where I run some Python microservice. From my application running on an Apps EC2 (in public subnet) I am trying to access the Python microservices.
I ...
- 13
0
votes
1
answer
304
views
Ubuntu sudo required for listening on port 80 but not on other unused ports
On my Ubuntu desktop, I'm able to successfully run a small C++ webserver on unused ports like this:
./myserver 127.0.0.1 3050
This problem is that if I run on port 80, I must run as sudo like this:
...
0
votes
1
answer
751
views
How do I ssh into a server over HTTPs?
I have a server that has a reverse proxy (NGINX) set up to host all my other websites/services on a single server. I would like to create a way to SSH into that server over HTTP. The reason I need to ...
1
vote
1
answer
2k
views
Why is HAProxy forwarding HTTP2 requests as HTTP 1.1?
I'm trying to configure a load balancer between 2 servers with HAPoxy, this is my configuration:
frontend haproxynode
bind *:443 ssl crt /etc/ssl/private/isel.pem alpn h2,http/1.1
mode tcp
...
- 11
0
votes
1
answer
1k
views
Why does curl -k -I https://host.example.com not return response headers if certificate is not valid?
Does anyone know why curl with -k (--insecure) option and -I for show headers still shows the html response and not the headers as expected?
Working as expected:
$ curl -I https://validsslcert.example....
0
votes
0
answers
60
views
website STILL need to redirect from HTTP to https after Nginx redirect config
I use AWS EC2 to build a website using load balancer.
However, the pentesting result shows that the website still could be reached by http.
I have checked that in the Nginx config file, we does have a ...
- 1
0
votes
2
answers
74
views
New iptables NAT produces Error 400 Bad Request for Other HTTP Requests
All:
Recently, I added several new iptables (RE: code snippet below) rules to route traffic through my VPN (0x1000/0x1000) for a specific destination (172.67.168.48) over port 443. The new rules NAT ...
- 15
0
votes
0
answers
2k
views
Centos 8 apache kerberos authentication sso
For some reason I am unable to authenticate via sso to internal website when you connect it directly via cname. Centos linux is joined in the domain itself.
What happens is that when I enter the ...
- 1
0
votes
0
answers
2k
views
HTTP request sent, awaiting response... 400 Bad Request on using wget for downloading dropbox files in CentOS
The file is around 447MB. I cannot download it using the following command in CentOS. How can I download https://www.dropbox.com/sh/6yd1ygtyc3yd981/AABVeEqzC08YQv4UZk7lNHvya?dl=0&preview=CIFAR-FS....
- 109
0
votes
1
answer
657
views
lighttpd won't start even with the right permissions
systemctl status lighttpd
● lighttpd.service - Lightning Fast Webserver With Light System Requirements
Loaded: loaded (/usr/lib/systemd/system/lighttpd.service; enabled; vendor preset: disabled)
...
- 1,702
1
vote
1
answer
2k
views
wget not downloading files with 304 Not Modified
I'm trying to download a website recursively using wget:
wget --recursive --page-requisites --no-parent --convert-links -e robots=off --domains orteil.dashnet.org orteil.dashnet.org/cookieclicker
It ...
- 193
1
vote
1
answer
1k
views
Downloading file on Linux shell from an interactive http site using curl wget
I am trying to download a file form a HTTP website from my Linux shell using wget and curl.
Below is the manual GUI process of doing it:
Once I click on the Link-A, it redirects me to a different ...
1
vote
1
answer
2k
views
How to run Python 3 http.server on port 80 without root?
I want to run Python 3 http.server on port 80, without running it as root and without installing any extra software (e.g., authbind). I'm using Arch Linux. I would prefer to do this with systemd and ...
- 16.5k
2
votes
0
answers
799
views
One line HTTP Proxy command?
Is there a simple, one-line command to run a HTTP Proxy? There are several one-line commands “serve this directory over HTTP” (e.g. python -m SimpleHTTPServer). Is there any command, or one-liner, for ...
- 1,136