Hi Chris,
Take any web application try below curl command , this curl command sends
invalid Host Header application should validate by comparing with valid
bost headers and block this request by returning 404 /403.
curl -isk -H "host:host.whitehatsec.com" "
https://staging.avoxdata.com/portal/ti
Pradeep,
On 9/13/21 09:35, Pradeep wrote:
I am using Tomcat 7.0.57, I can't change the Tomcat version now.
Running my previous "forge" file (with GET http://www.microsoft.com/,
the the forged Host header) against Tomcat 7.0.57:
$ nc localhost 8080 < forge
HTTP/1.1 200 OK
Server: Apache-Coyo
Pradeep,
On 9/13/21 09:35, Pradeep wrote:
Hi Chris,
I am using Tomcat 7.0.57, I can't change the Tomcat version now. I tried
adding Virtual Host with RemotrHostValve to allow list of hosts but still
no luck.
This is because you are trying to block the client by their identity
(like "local
Hi Chris,
I am using Tomcat 7.0.57, I can't change the Tomcat version now. I tried
adding Virtual Host with RemotrHostValve to allow list of hosts but still
no luck.
Regards,
Pradeep
On Mon, 13 Sep 2021, 2:28 pm Christopher Schultz, <
ch...@christopherschultz.net> wrote:
> Pradeep,
>
> On 9/
Pradeep,
On 9/10/21 17:38, Pradeep wrote:
My application is HTTPS not HTTP and now one of the application security
platforms WhitHatSec raised this vulnerability issue.
I tried to reproduce your "attack" on Tomcat 8.5.59, like this:
$ cat forge
GET www.microsoft.com/ HTTP/1.1
Host: www.micro
Hi Chris,
My application is HTTPS not HTTP and now one of the application security
platforms WhitHatSec raised this vulnerability issue. I tried the above
configuration mentioned but no luck but this configuration advised in
Apache website
http://tomcat.apache.org/tomcat-9.0-doc/config/host.html#
Pradeep,
On 9/10/21 06:19, Pradeep wrote:
Hi Team,
I need your help to fix HTTP Host header attacks.
I'm currently in the process of trying to fix a site vulnerability,
basically it is one type of the "Improper Input Handling" attack.
Let's say my website is www.mywebsite.com and there is hack
On Thu, Jul 24, 2014 at 6:25 PM, Arya Farzan wrote:
> I am using Tomcat by itself. It is pretty much a default installation using
> apt-get on Debian.
Error #1 - dump that and install a real Tomcat.
> I changed the port from 8080 to port 80
Error #2 - don't run Tomcat as root; use jsvc, a prox
Thank you. I changed it to your example and now it's working
On Thu, Jul 24, 2014 at 8:35 PM, Igal @ getRailo.org
wrote:
> I prefer to use Context/docBase instead of Host/appBase
>
> try this:
>
>
>mysite.com
>
>
>
>
>
>
>
> On 7/24/2014 6:28 PM, Arya Farzan wrote:
>
>> I just tried t
I prefer to use Context/docBase instead of Host/appBase
try this:
mysite.com
On 7/24/2014 6:28 PM, Arya Farzan wrote:
I just tried this with IE and it says "The webpage cannot be found"
in google chrome source is 100% blank
On Thu, Jul 24, 2014 at 8:20 PM, Igal Sapir wrote:
C
I just tried this with IE and it says "The webpage cannot be found"
in google chrome source is 100% blank
On Thu, Jul 24, 2014 at 8:20 PM, Igal Sapir wrote:
> Check with view source on the blank page and see if you get anything there
> On Jul 24, 2014 6:16 PM, "Jordan Michaels" wrote:
>
> > H
Hi Jordan
I am using Tomcat by itself. It is pretty much a default installation using
apt-get on Debian. The only changes I made are:
I changed the port from 8080 to port 80
And I changed AUTHBIND=no to AUTHBIND=yes
On Thu, Jul 24, 2014 at 8:16 PM, Jordan Michaels
wrote:
> Hi Arya,
>
> Are yo
Check with view source on the blank page and see if you get anything there
On Jul 24, 2014 6:16 PM, "Jordan Michaels" wrote:
> Hi Arya,
>
> Are you using a web server like Apache in front of Tomcat, or are you
> hitting the Tomcat port directly? This will tell us if the problem is
> somewhere in
Hi Arya,
Are you using a web server like Apache in front of Tomcat, or are you
hitting the Tomcat port directly? This will tell us if the problem is
somewhere in your connector setup or not.
Any clues in your catalina.out log file?
Warm Regards,
Jordan Michaels
On 07/24/2014 06:03 PM, Arya
> From: gnix infosoft noida [mailto:garg.may...@gmail.com]
> Subject: tomcat virtual host or directory
>
> How tio configure virtual host in tomcat 5.5
Did you try to look at the Tomcat doc before posting?
http://tomcat.apache.org/tomcat-5.5-doc/virtual-hosting-howto.html
- Chuck
THIS COMMUN
[EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: Re: tomcat virtual host
>
> Hi André and every body,
>
> Thank you very mutch for the details:))
>
> Tail
>
> - Mail Original -
> De: "André Warnier" <[EMAIL PROTECTED]>
> À: "To
Objet: Re: tomcat virtual host
Caldarale, Charles R wrote:
>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
>> Subject: Re: tomcat virtual host
>>
>> status, or does something else happen? Is the DNS name
>> "mysvn" defined on the machine your browser
Caldarale, Charles R wrote:
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Subject: Re: tomcat virtual host
status, or does something else happen? Is the DNS name
"mysvn" defined on the machine your browser is running on?
Internet Explorer could not display this web page
i te
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> status, or does something else happen? Is the DNS name
> "mysvn" defined on the machine your browser is running on?
>
> Internet Explorer could not display this web page
>
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> I configured localy a virtual host with tomcat 6
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
> http://mysvn:8080/
Wh
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> I configured localy a virtual host with tomcat 6
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
> http://mysvn:8080/
Wh
>Sorry, but your question does not make any sense to me.
>I don't see anything stopping you from adding as many virtual hosts as you
>want. If you need a different default webapp for each >virtual host, then
>each will have to specify a different appBase attribute. Any webapps
>that you wa
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> But, if a want to add a second application web , for example
> mysvn2 and i do not remove the mysvn,
> that is why I would like to use the virtual host.
Sorry, but your question does not
"Tomcat Users List"
> Envoyé: Jeudi 20 Novembre 2008 16:23:40 GMT +01:00 Amsterdam / Berlin /
> Berne / Rome / Stockholm / Vienne
> Objet: RE: tomcat virtual host
>
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> > Subject: Re: tomcat virtual host
> >
- Mail Original -
De: "Charles R Caldarale" <[EMAIL PROTECTED]>
À: "Tomcat Users List"
Envoyé: Jeudi 20 Novembre 2008 16:23:40 GMT +01:00 Amsterdam / Berlin / Berne /
Rome / Stockholm / Vienne
Objet: RE: tomcat virtual host
> From: [EMAIL PROTECTED] [mailt
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> But if i do this, how can i access de tomcat manager ? with
> other name, but the examples will work ?
By using their URLs?
http://mysvn:8080/manager/html
http://mysvn:8080/examples
>I agree with the other response: rename your war to ROOT.war, so that it is
>the root web application.
>By the way, it is worth changing only one thing at once in your URL when
>testing. You are changing two.
>Does http://localhost:8080/ work?
>Does http://mysvn:8080/svnrepository work?
But
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> When i tape http://mysvn:8080/ in browser to access to my web
> application, i have this :
> Internet Explorer cannot display the web page
> but when i tape http://localhost:8080/svnrepository; i access
> correctely to my application.
> Find fil
> I deployed my webapp svn.war on webapps directory of tomcat 6.
> I configured localy a virtual host with tomcat 6, but it does
> not work.
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
> http://mysvn:8080/
>
> This is a part of server.xm
Can you be a bit more specific about the problem ?
"it does not work" does not help much.
[EMAIL PROTECTED] wrote:
Hi,
I deployed my webapp svn.war on webapps directory of tomcat 6.
I configured localy a virtual host with tomcat 6, but it does not work.
This url works :
http://localhost:8080/s
I suspect he needs to rename svn.war to ROOT.war
-- David
Sent from my iPod
On Nov 20, 2008, at 8:47 AM, Peter Crowther
<[EMAIL PROTECTED]> wrote:
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
I deployed my webapp svn.war on webapps directory of tomcat 6.
I configured localy a virtual
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> I deployed my webapp svn.war on webapps directory of tomcat 6.
> I configured localy a virtual host with tomcat 6, but it does
> not work.
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
>
32 matches
Mail list logo
