Skip to content

Commit b15374e

Browse files
author
Maximilian Hildebrand
committed
disabled DOS via illegal header name, because of net/http limitations
1 parent 5f5d58b commit b15374e

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

pkg/techniques.go

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -808,8 +808,10 @@ func DOS() reportResult {
808808
headerDOSTemplate(&repResult, values, "User-Agent", "blacklisted security scanners ", true)
809809

810810
// DOS via illegal header name
811+
/* Currently disabled because of net/http throws error because of illegal character TODO: workaround
811812
values = []string{"foobar"}
812813
headerDOSTemplate(&repResult, values, "Ill\\egal", "illegal header name ", true)
814+
*/
813815

814816
// DOS via Max-Forwards (Webserver/Cache returns request)
815817
values = []string{"0", "1", "2"}

0 commit comments

Comments
 (0)