3 ms·
> without going onto a redirect to fbi Redirect to FSB then. But the more real one would be sending something what could be executed on their side, ie some Ja
by justsomehnguy 4y ago
> without going onto a redirect to fbi
Redirect to FSB then.
But the more real one would be sending something what could be executed on their side, ie some JavaScript or maybe PHP.
Most of the time it's nothign to gain there (because compromised machines or VM/jail/container) but still can be interesting, like finding out the real IP of the first machine or attempting to grab the cookies. Maybe even shellcode to get the AS info and send a note to abuse@.
- quesera 4y agoI sometimes redirect obviously-hostile requests to localhost. E.g. http://localhost/../../../../../etc/passwd http://localhost/../../../../../etc/passwd I know it has zero effect, but it's more fun than a 404.