search

arvinddoraiswamy / mywebappscripts

A collection of all the lists, scripts and techniques I use while doing web application penetration tests.
MIT License
168 stars 80 forks source link

Recursive loop starts when download js files extension runs #14

Closed arvinddoraiswamy closed 10 years ago

arvinddoraiswamy commented 10 years ago

Load downloadjsfiles extension. Download JS file. Browser never loads file and makes a huge number of requests instead for that file. Wget or Curl inside the extension also make a huge number of calls. No clue why :-o . Weird bug as there are no loops inside the file either.

arvinddoraiswamy commented 10 years ago

Fixed. A weird weird bug. If I point wget or curl to a burp listener on 8080 it just makes a huge number of requests for the same file, thus resulting in firefox hanging as well and not downloading the file. Note here that Burp is chained to a socks proxy over a forwarded ssh connection (127.0.0.1:9051).

If however I point wget or curl directly to the socks proxy it seems to work perfectly well. So TLDR

wget - burp - seattle socks proxy - application ----> Recursive loop hanging the browser and wget wget - seattle socks proxy - application ----> Works

Why? No f****\ clue. Zero. :-o