3 ms·
How do you know it wasn’t rate limited?
by cortesoft 5y ago
How do you know it wasn’t rate limited?
- AdamJacobMuller 5y agofor((i=0;i<=99999999999;i++));do curl https://site.com/info.php?id=$i https://site.com/info.php?id=$i > $i.json done
- callalex 5y agoThis is a tangent, but curl has built-in support for “globbing”. For numeric ranges you can just put the range in [brackets] and it handles the rest.
- duskwuff 5y agoHardly matters. If an endpoint is leaking anything as sensitive as national ID + name + address, a determined attacker will have no problem with scraping it slowly or using a network of proxies to avoid rate limits.