3 ms·
Your checker doesn't work well with curl, btw -- you end up seeing both the not vulnerable AND the vulnerable (alt text) messages.
by rdl 13y ago
Your checker doesn't work well with curl, btw -- you end up seeing both the not vulnerable AND the vulnerable (alt text) messages.
- cantfindmypass 13y agoThere's not a whole lot I can do about that without adding a lot of complexity. You could try downloading https://gotofail.com:1266/test.png https://gotofail.com:1266/test.png I suppose.
- Jayschwa 13y agocurl https://gotofail.com:1266/ https://gotofail.com:1266/ Client's that aren't vulnerable should flip out when trying to load that.