hakluke/hakoriginfinder

The Tool is not producing intended result

Closed this issue · 2 comments

sn1p3rt3s7 commented

Hi,

  • Command:
    prips 93.184.215.0/28 | ./hakoriginfinder -h http://example.com/index.html | grep -v "NOMATCH"

image
image
Issue: Matching all the IP addresses given in 93.184.215.0/24 range

The expected output should be
MATCH for 93.184.215.14 and NOMATCH for others

sn1p3rt3s7 commented

Looks like all the other IP addresses in the subnet range accept the host header and loads example.com page. All part of same Organization 🤔

hakluke commented

Hey, this is working exactly as intended.

If you check manually with curl, the response from all of these IPs with the Host header set to example.com is identical to the response of navigating to example.com directly.

Here's a diff to prove it:

/$ diff <(curl -s -H "Host: example.com" 93.184.215.11) <(curl -s example.com)
/$ diff <(curl -s -H "Host: example.com" 93.184.215.10) <(curl -s example.com)
/$
  • ❤️1