Vous êtes sur la page 1sur 3

==================no split======================

GET http://bughost.com HTTP/1.1[crlf]Host: bughost.com[crlf]X-Online-Host:


bughost.com[crlf]Connection" Keep-Alive[crlf][crlf][real_raw]
==================with split=====================
GET http://bughost.com HTTP/1.1[crlf]Host: bughost.com[crlf]X-Online-Host:
bughost.com[crlf]Connection" Keep-Alive[crlf][crlf][split][real_raw]
==============================================

Back Inject
==================no split======================
[real_raw]GET http://bughost.com HTTP/1.1[crlf]Host: bughost.com[crlf]X-Online-
Host: bughost.com[crlf]Connection" Keep-Alive[crlf][crlf]
==================with split=====================
[real_raw][split]GET http://bughost.com HTTP/1.1[crlf]Host: bughost.com[crlf]X-
Online-Host: bughost.com[crlf]Connection" Keep-Alive[crlf][crlf]
=================or with split====================
[raw][crlf][split][method] http://bughost.com HTTP/1.1[crlf]Host:
bughost.com[crlf]X-Online-Host: bughost.com[crlf]Connection" Keep-Alive[crlf]
[crlf]
=============================================

Normal Inject
=============================================
CONNECT [host_port] HTTP/1,0[crlf]Host: bughost.com[crlf]X-Online-
Host[crlf]Connection: Keep-Alive[crlf][crlf]
=============================================

normal and easy payload !!!


Let's play to line break and protocol break
What it's mean ?
use abnormal line string and protocol to break and find an error, because has many
bug in line string and protocol to

You can use line string only [cr] or [lf] and [lfcr] , [lf][lf] , [cr][cr] , [crlf][cr] , [crlf]
[lf] , [lfcr][cr] , [lfcr][lf] , [crlf][cr][crlf] , [crlf][lf][crlf] , etc

example...
==============================================
GET http://bughost.com HTTP/1.1[crlf]lf][crlf]Host: bughost.com[crlf]X-Online-
Host: bughost.com[crlf]Connection: Keep-Alive[crlf][crlf][real_raw]
======================or=====================
GET http://bughost.com HTTP/1.1[crlf]Host: bughost.com[crlf]X-Online-Host:
bughost.com[lfcr]Connection: Keep-Alive[crlf][crlf][real_raw]
==============================================

And remove protocol or add something character in front or back protocol

example...
==============================================
GET http://bughost.com [crlf]Host: bughost.com[crlf]X-Online-Host:
bughost.com[crlf]Connection: Keep-Alive[crlf][crlf][real_raw]
======================or=====================
GET http://bughost.com XHTTP/1.0[crlf]Host: bughost.com[crlf]X-Online-Host:
bughost.com[crlf]Connection: Keep-Alive[crlf][crlf][real_raw]
======================or=====================
GET http://bughost.com Connected HTTP/1.0 [crlf]Host: bughost.com[crlf]X-
Online-Host: bughost.com[crlf]Connection: Keep-Alive[crlf][crlf][real_raw]
======================or=====================
GET http://bughost.com SHTTP/1.0 200OK[crlf]Host: bughost.com[crlf]X-Online-
Host: bughost.com[crlf]Connection: Keep-Alive[crlf][crlf][real_raw]
======================or=====================
GET http://bughost.com SHTTP/1.0 200 Connection Established
HTTP/1.0[crlf]Host: bughost.com[crlf]X-Online-Host: bughost.com[crlf]Connection:
Keep-Alive[crlf][crlf][real_raw]