Recon and Attack Vectors from My Logs
I like to fool around those unwanted requests, sending back a randomly selected response among which: a gzip bomb, an xml bomb, specify gzip content encoding but send WAZAAAA in clear text instead, a redirect to localhost, redirect to their own public IP, sending back data whose content-length don't match what they're actually getting and a bunch of other shenanigans. The code is available on github [1], I'm super keen to add a bunch of other fun payload if someone has some clever ideas (without going onto a redirect to fbi, cia or anything that could cause more issues than what it's worth)<p>[1] <a href="https://github.com/mickael-kerjean/filestash/blob/master/server/plugin/plg_security_scanner/index.go#L198-L217" rel="nofollow">https://github.com/mickael-kerjean/filestash/blob/master/ser...</a>