3 ms·
> For example, with the python SimpleHTTPServer I can simply request http://localhost/../../.ssh/id_rsa http://localhost/../../.ssh/id_rsa I think my localhost
by _pmf_ 7y ago
> For example, with the python SimpleHTTPServer I can simply request http://localhost/../../.ssh/id_rsa http://localhost/../../.ssh/id_rsa
I think my localhost is different from your localhost.
- allendoerfer 7y agoOP was suggesting that a website you were visiting was accessing this URL via JavaScript and posting it to OP's server.
- minitech 7y agoSame-origin policy prevents that specific attack, although the same idea exists if you’re not protected from DNS rebinding on localhost, and `--bind 127.0.0.1` (or some other way to block the port) is necessary – but the Pythons’ built-in HTTP servers aren’t vulnerable to path traversal anyway.