Other nomination

How I Hacked StackOverflow

Anthony Ferrara · blog.ircmaxell.com

An SSH-tunnelled Squid proxy stamped X-Forwarded-For: 127.0.0.1 on the author's requests, and StackExchange's IIS was configured to rewrite Remote_Addr from that header. The application checked the right variable, so the proxy alone granted full chat admin and database query access. The lesson drawn is that server and application must not disagree about which header is trusted.

Record

Researcher

Anthony Ferrara

Published by

blog.ircmaxell.com

In the archive

• Nominated for the 2012 Top 10 Web Hacking Techniques

Tags

• auth-bypass
• http
• proxy
• aspnet
• case-study
• privilege-escalation
• reverse-proxy
• php
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Anthony Ferrara, first published at the original source. Preserved copies are kept so the citation survives its host.