4 ms·
The jsonip website has some odd behavior, if you add additional characters to the URL it looks like the server tries to run JSON.parse on the extra characters p
by mortallywounded 3y ago
The jsonip website has some odd behavior, if you add additional characters to the URL it looks like the server tries to run JSON.parse on the extra characters plus a payload. Wonder if there's a way to pollute the server or get remote code execution.
- geuis 3y agoWhat I'm guessing you're describing is the jsonp behavior. For example: `https://jsonip.com/mortalcombat https://jsonip.com/mortalcombat` `mortalcombat({"ip":"2601:645:4001:1b57:5832:dcb9:c236:59e4"});` There's no parsing happening. If you are talking about something else, I'd love to know about whatever it is.