HomeSearchPrevious dayNext day

00:01:24dm4v quits [Read error: Connection reset by peer]
00:01:39dm4v joins
00:01:41dm4v quits [Changing host]
00:01:41dm4v (dm4v) joins
00:09:16Doranwen (Doranwen) joins
00:18:18Doranwen quits [Ping timeout: 250 seconds]
00:19:29Doranwen (Doranwen) joins
00:23:56Doranwen quits [Ping timeout: 250 seconds]
00:24:30Doranwen (Doranwen) joins
00:44:35TastyWiener95 quits [Ping timeout: 244 seconds]
01:03:11dm4v quits [Ping timeout: 244 seconds]
01:05:04dm4v joins
01:05:06dm4v quits [Changing host]
01:05:06dm4v (dm4v) joins
01:30:24HP_Archivist (HP_Archivist) joins
01:43:26Ruthalas (Ruthalas) joins
01:52:21jamesp quits [Client Quit]
02:06:09BlueMaxima quits [Read error: Connection reset by peer]
02:54:04qwertyasdfuiopghjkl quits [Remote host closed the connection]
02:57:31qwertyasdfuiopghjkl joins
03:16:46qw3rty_ joins
03:20:19qw3rty__ quits [Ping timeout: 252 seconds]
03:25:04tzt quits [Ping timeout: 250 seconds]
03:31:46BlueMaxima joins
04:17:56HP_Archivist quits [Ping timeout: 250 seconds]
04:18:32<kiska>I guess this is where I announce I have a paste thingy xD
04:18:36<kiska>http://paste.kiska.pw/
04:34:50nicolas17 quits [Ping timeout: 250 seconds]
04:42:49godane quits [Ping timeout: 252 seconds]
04:44:48godane (godane) joins
04:48:36godane quits [Remote host closed the connection]
04:49:50godane (godane) joins
05:43:36sonick quits [Quit: Connection closed for inactivity]
06:49:11sonick (sonick) joins
09:06:13phiresky2 joins
09:08:20phiresky quits [Ping timeout: 244 seconds]
09:08:20phiresky2 is now known as phiresky
09:10:40IDK (IDK) joins
09:24:18Gereon6 quits [Ping timeout: 250 seconds]
09:27:03Gereon6 (Gereon) joins
10:07:38Gereon6 quits [Ping timeout: 250 seconds]
10:39:03Gereon6 (Gereon) joins
10:44:21Gereon6 quits [Client Quit]
10:47:17Gereon6 (Gereon) joins
11:07:21tzt joins
12:09:19BlueMaxima quits [Client Quit]
12:28:30Hackerpcs quits [Quit: Hackerpcs]
12:29:48Hackerpcs (Hackerpcs) joins
12:45:43gazorpazorp quits [Ping timeout: 252 seconds]
12:50:34sonick quits [Ping timeout: 250 seconds]
12:50:34Soulflare quits [Ping timeout: 250 seconds]
12:51:56sonick (sonick) joins
12:53:13Soulflare joins
12:54:52Panasonic joins
12:54:54wickedplayer494 quits [Ping timeout: 250 seconds]
12:55:18Ravenloft quits [Read error: Connection reset by peer]
12:55:40wickedplayer494 joins
13:07:52pmlo3 joins
13:09:04hook54321_ (hook54321) joins
13:09:04@ChanServ sets mode: +o hook54321_
13:09:54TastyWiener95 (TastyWiener95) joins
13:10:00IDK quits [Client Quit]
13:14:25Gereon6 quits [*.net *.split]
13:14:25phiresky quits [*.net *.split]
13:14:25Ruthalas quits [*.net *.split]
13:14:25Doranwen quits [*.net *.split]
13:14:25@hook54321 quits [*.net *.split]
13:14:25wessel1512 quits [*.net *.split]
13:14:25masterX244 quits [*.net *.split]
13:14:25VerifiedJ quits [*.net *.split]
13:14:25britmob2563 quits [*.net *.split]
13:14:25systwi quits [*.net *.split]
13:14:25Jake quits [*.net *.split]
13:14:25shoghicp quits [*.net *.split]
13:14:25dewdrop quits [*.net *.split]
13:14:25Terbium quits [*.net *.split]
13:14:25pabs quits [*.net *.split]
13:14:25driib quits [*.net *.split]
13:14:25Muad-Dib quits [*.net *.split]
13:14:25monoxane quits [*.net *.split]
13:14:25@dxrt quits [*.net *.split]
13:14:25sembiance quits [*.net *.split]
13:14:25AK quits [*.net *.split]
13:14:25betamax quits [*.net *.split]
13:14:25xit quits [*.net *.split]
13:14:25Ajay quits [*.net *.split]
13:14:25HotSwap` quits [*.net *.split]
13:14:25kiskaWee1 quits [*.net *.split]
13:14:25Wingy quits [*.net *.split]
13:14:25pmlo2 quits [*.net *.split]
13:14:25@OrIdow6 quits [*.net *.split]
13:14:25@chfoo quits [*.net *.split]
13:14:25Dallas quits [*.net *.split]
13:14:25aarchi quits [*.net *.split]
13:14:25mrfooooo quits [*.net *.split]
13:14:25Myself quits [*.net *.split]
13:14:25@arkiver quits [*.net *.split]
13:14:25Mayk78 quits [*.net *.split]
13:14:25djsrv quits [*.net *.split]
13:14:25jodizzle quits [*.net *.split]
13:14:25brabo quits [*.net *.split]
13:14:25maxfan8 quits [*.net *.split]
13:14:25pie_ quits [*.net *.split]
13:14:25kiskaLogBot quits [*.net *.split]
13:14:25@JAA quits [*.net *.split]
13:14:25[42] quits [*.net *.split]
13:14:25RKenshin quits [*.net *.split]
13:14:25Sanqui quits [*.net *.split]
13:14:25Frogging101 quits [*.net *.split]
13:14:25@Kaz quits [*.net *.split]
13:14:25jmtd quits [*.net *.split]
13:14:25SketchTheCow quits [*.net *.split]
13:14:25Dj-Wawa quits [*.net *.split]
13:14:25kiska quits [*.net *.split]
13:14:25marked1 quits [*.net *.split]
13:14:25Kinille quits [*.net *.split]
13:14:25s-crypt quits [*.net *.split]
13:14:25flashfire42 quits [*.net *.split]
13:14:25bradp quits [*.net *.split]
13:14:25Hecz quits [*.net *.split]
13:14:25Suika quits [*.net *.split]
13:14:25@Fusl quits [*.net *.split]
13:14:25iandees quits [*.net *.split]
13:14:25justaguy quits [*.net *.split]
13:14:25Gaelan quits [*.net *.split]
13:14:25mr_archive quits [*.net *.split]
13:14:27@hook54321_ is now known as @hook54321
13:16:22Sanqui joins
13:16:22Gereon6 (Gereon) joins
13:16:22phiresky joins
13:16:22Ruthalas (Ruthalas) joins
13:16:22Doranwen (Doranwen) joins
13:16:22wessel1512 joins
13:16:22masterX244 (masterX244) joins
13:16:22VerifiedJ (VerifiedJ) joins
13:16:22britmob2563 joins
13:16:22systwi (systwi) joins
13:16:22Jake (Jake) joins
13:16:22shoghicp (shoghicp) joins
13:16:22dewdrop (dewdrop) joins
13:16:22Terbium joins
13:16:22pabs (pabs) joins
13:16:22driib (driib) joins
13:16:22Muad-Dib joins
13:16:22monoxane (monoxane) joins
13:16:22dxrt (dxrt) joins
13:16:22sembiance (sembiance) joins
13:16:22AK (AK) joins
13:16:22betamax (betamax) joins
13:16:22xit joins
13:16:22Ajay joins
13:16:22HotSwap` joins
13:16:22kiskaWee1 (kiska) joins
13:16:22Wingy (Wingy) joins
13:16:22OrIdow6 (OrIdow6) joins
13:16:22chfoo (chfoo) joins
13:16:22Dallas (Dallas) joins
13:16:22aarchi (aarchi) joins
13:16:22mrfooooo joins
13:16:22Myself (myself) joins
13:16:22arkiver (arkiver) joins
13:16:22nuke.hackint.org sets mode: +oooo dxrt OrIdow6 chfoo arkiver
13:16:22Mayk78 joins
13:16:22djsrv (djsrv) joins
13:16:22jodizzle (jodizzle) joins
13:16:22brabo (brabo) joins
13:16:22maxfan8 (maxfan8) joins
13:16:22pie_ joins
13:16:22kiskaLogBot joins
13:16:22JAA (JAA) joins
13:16:22[42] (N4Y) joins
13:16:22RKenshin joins
13:16:22Frogging101 joins
13:16:22nuke.hackint.org sets mode: +o JAA
13:16:22Kaz (Kaz) joins
13:16:22jmtd joins
13:16:22SketchTheCow joins
13:16:22Dj-Wawa (Dj-Wawa) joins
13:16:22kiska (kiska) joins
13:16:22marked1 joins
13:16:22Kinille (Kinille) joins
13:16:22s-crypt (s-crypt) joins
13:16:22flashfire42 (flashfire42) joins
13:16:22bradp (bradp) joins
13:16:23Hecz (Hecz) joins
13:16:23Suika joins
13:16:23Fusl (Fusl) joins
13:16:23iandees joins
13:16:23justaguy joins
13:16:23Gaelan (Gaelan) joins
13:16:23mr_archive joins
13:16:23nuke.hackint.org sets mode: +oo Kaz Fusl
13:16:25kiska quits [Max SendQ exceeded]
13:18:24kiska (kiska) joins
13:18:35HP_Archivist (HP_Archivist) joins
13:47:14gazorpazorp (gazorpazorp) joins
13:52:49benjins quits [Ping timeout: 252 seconds]
13:57:18benjins joins
14:23:41sec^nd quits [Ping timeout: 258 seconds]
14:38:17sec^nd (second) joins
14:49:28HP_Archivist quits [Ping timeout: 252 seconds]
15:18:32nicolas17 joins
15:28:05Arcorann quits [Ping timeout: 244 seconds]
15:44:44@dxrt quits [Quit: ZNC - http://znc.sourceforge.net]
15:45:22dxrt joins
15:45:24dxrt quits [Changing host]
15:45:24dxrt (dxrt) joins
15:45:24@ChanServ sets mode: +o dxrt
16:09:01sonick quits [Client Quit]
16:39:12wolfin quits [Read error: Connection reset by peer]
16:39:27wolfin (wolfin) joins
16:57:55IDK (IDK) joins
16:58:53godane1 joins
17:01:28godane quits [Ping timeout: 252 seconds]
17:15:57HP_Archivist (HP_Archivist) joins
17:39:08AlsoHP_Archivist joins
17:40:52HP_Archivist quits [Ping timeout: 244 seconds]
17:43:49AlsoHP_Archivist quits [Ping timeout: 252 seconds]
17:48:49DogsRNice (Webuser299) joins
18:04:04sec^nd quits [Remote host closed the connection]
18:04:29sec^nd (second) joins
18:07:44ArchivalEfforts quits [Ping timeout: 244 seconds]
18:28:24ArchivalEfforts joins
18:29:45earne joins
18:43:42gazorpazorp quits [Remote host closed the connection]
18:47:48gazorpazorp (gazorpazorp) joins
18:50:09Nay (JeDa) joins
19:02:58Nay quits [Client Quit]
19:12:24Nay (JeDa) joins
19:25:02sonick (sonick) joins
20:03:20<@JAA>Oh look, turns out that HTTP servers that don't comply to the specs are a bad idea. Who'd've thought‽ https://portswigger.net/daily-swig/haproxy-vulnerability-enables-http-request-smuggling-attacks
20:06:45<@JAA>Ok, just a missing length check in this case, but the general technique sends requests with Content-Length and Transfer-Encoding headers and takes advantage of servers handling such requests differently. (The correct action would be to reject the request and reply with a 400 or similar since those two headers can't be used simultaneously.)
20:11:50spirit quits [Quit: Leaving]
20:45:19qwertyasdfuiopghjkl quits [Ping timeout: 244 seconds]
20:49:49<kiska>Whoops?
20:59:36LeGoupil joins
21:15:13LeGoupil quits [Client Quit]
21:56:03<@JAA>OVH pls
21:56:21<@JAA>I'm trying to ~~work~~ archive here.
22:07:46<@JAA>They're moving traffic to new network infra and are claiming no loss is occurring. Meanwhile, mtr reports 84% loss over the past 10 minutes. Fun.
22:23:19<nyany>http request smuggling attacks?
22:52:07BlueMaxima joins
22:53:03<h3ndr1k>thats when a proxy does security checks on an incomming request, it might pass, but it contains some broken data, that confuses vulnerable servers. There is another request right after the first one, which then passes right through, without being checked against security rules.
22:55:54<h3ndr1k>The same exists for mail servers. 2010 or so this was discovered in multiple very popular smtp servers. This year a message injection attack was discovered in dovecot I think. At least some researchers contacted me because of my mail server, which runs dovecot. But I dont remember all the details. At some point there was a security patch for dovecot-submissiond.
23:09:01<@JAA>h3ndr1k: Huh, interesting, would love to hear more about that. The only thing I can find that's even remotely related is CVE-2021-33515, but that's something quite different.
23:24:03Arcorann (Arcorann) joins
23:25:36<nicolas17>the proxy gives priority to the transfer-encoding and uses that to decide where the request ends, and forwards it to the origin server, but the origin server pays attention to content-length instead and interprets it as two requests instead of one
23:25:48<nicolas17>(or vice versa wrt which header is used)
23:38:06<@JAA>In this particular case, it was actually an integer overflow in the header field name length, so not quite as dumb. The JFrog blog post has the details: https://jfrog.com/blog/critical-vulnerability-in-haproxy-cve-2021-40346-integer-overflow-enables-http-smuggling/

HomeSearchPrevious dayNext day