5 ms·
Hurl http://victim.org/index.php?a=;DROP http://victim.org/index.php?a=;DROP DATABASE users -- What I want to say is that services like this have a security fl
by WA 15y ago
Hurl http://victim.org/index.php?a=;DROP http://victim.org/index.php?a=;DROP DATABASE users --
What I want to say is that services like this have a security flaw by design which allows random people to execute strange statements in the name of Hurl.
There are certainly other ways to execute malicious HTTP requests (for example, let the Google Bot do it), but still, it should be pointed out.
- tomblomfield 15y agoBy "services like this", I hope you mean websites that are vulnerable to SQL injection, and not Hurl itself? Hoping that an attacker can't use curl probably isn't a good security solution...
- WA 15y agoYes, not Hurl itself. But Hurl can be used to execute malicious statements. It is a difference, whether an attacker uses his own IP address (or a setup with various VPNs and proxies) or uses Hurl for it so that the target website sees only Hurl's IP in its logs. In times of free WiFi, the traceability of malicious requests is definitely reduced anyway, but Hurl could potentially add another layer that can be used by an attacker to obscure his/her origin. I'm not saying that this is a major security issue, it is just a flaw by design, which I wanted to point out.
- ay 15y agoDo you happen to know how translate.google.com deals with this problem ?
- evmar 15y agoYou can make a browser GET or POST to any arbitrary URL already via JavaScript.
- gcb 15y agoOn mobile so i can't check myself: does The BROWSER makes the request by some clever way? Or simple server side script does it?
- dmn001 15y agoserver side: http://checkip.dyndns.com/ http://checkip.dyndns.com/ -> http://hurl.it/hurls/6fb24ac23d7c64a7edbcfceecd77c3d02586416b/c2ec392ee0dee0ec18cb466de547603fb7531e53 http://hurl.it/hurls/6fb24ac23d7c64a7edbcfceecd77c3d02586416... 127.0.0.1 -> http://hurl.it/hurls/7ad9448295a320acfe11160f0a8986fa591329f1/625380ead1fb24f897ca4ffcc511f0d76761b7ae http://hurl.it/hurls/7ad9448295a320acfe11160f0a8986fa591329f...
- lancefisher 15y agoIt's a ruby app, and uses curl on the server to make the request: https://github.com/defunkt/hurl/blob/master/app/app.rb https://github.com/defunkt/hurl/blob/master/app/app.rb
- tlrobinson 15y agoMeh, if abuse is really a problem Hurl could log requests and cooperate with law enforcement to trace it right back to you. If an attacker is relying on using Hurl as their only source of anonymity they're not very competent.
- moocow01 15y agoYeah they are potentially liable to the same sort of issues that proxies are which can make for a legally vulnerable service - unfortunate but true
- ma2rten 15y agoThere is a http header, which you can set as proxy which reveals the ip of the original requester. Maybe that would be a good first step.