Jump to content

Apache Httpd mod_proxy - Error Page Cross-Site Scripting


This CHT

Recommended Posts

The trick is to use a vertical tab (`%09`) and then place another URL in the tag. So once a victim clicks the link on the error page, she will go somewhere else.

As you can see, the browser changes the destination from relative / to an absolute url https://enoflag.de. The exploit is `http://domain.tld/%09//otherdomain.tld`

Here's the httpd configuration to reproduce the behavior:

    <Location />
        ProxyPass connectiontimeout=1 timeout=2
        Order allow,deny
        Allow from all
Link to post
Link to comment
Share on other sites


  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...