From owner-FreeBSD-users-jp@jp.FreeBSD.org Thu Apr 22 01:46:24 2004
Received: (from daemon@localhost)
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) id i3LGkOg59138;
	Thu, 22 Apr 2004 01:46:24 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from serio.al.rim.or.jp (serio.al.rim.or.jp [202.247.191.123])
	by castle.jp.FreeBSD.org (8.11.6p2+3.4W/8.11.3) with ESMTP/inet id i3LGkN959133
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Thu, 22 Apr 2004 01:46:23 +0900 (JST)
	(envelope-from tyuu@on.rim.or.jp)
Received: from mail5.rim.or.jp
	by serio.al.rim.or.jp (3.7W/HMX-13) id BAA15477
	for <FreeBSD-users-jp@jp.FreeBSD.org>; Thu, 22 Apr 2004 01:46:21 +0900 (JST)
Received: from localhost (flets5101.t3.rim.or.jp [202.247.160.101]) by mail5.rim.or.jp (8.9.3/3.7W)
	id BAA22475 for <FreeBSD-users-jp@jp.FreeBSD.org>; Thu, 22 Apr 2004 01:46:21 +0900 (JST)
Message-Id: <20040422.014605.74663448.tyuu@on.rim.or.jp>
To: FreeBSD-users-jp@jp.FreeBSD.org
From: Hiroshi Morita <tyuu@on.rim.or.jp>
In-Reply-To: <20040421115441.A0BBA53E18@yuka.unixusers.net>
References: <20040421.114529.78723506.tyuu@tsubasa.co.jp>
	<20040421115441.A0BBA53E18@yuka.unixusers.net>
X-Mailer: Mew version 2.2 on Emacs 21.3 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-users-jp@jp.FreeBSD.org
Precedence: list
Date: Thu, 22 Apr 2004 01:46:05 +0900
X-Sequence: FreeBSD-users-jp 79130
Subject: [FreeBSD-users-jp 79130] Re: =?ISO-2022-JP?B?GyRCJVYlaRsoQg==?=
 =?ISO-2022-JP?B?GyRCJSYlNiRHJU0lQyVIJCw9UE1oJEokJBsoQg==?= 
Sender: owner-FreeBSD-users-jp@jp.FreeBSD.org
X-Originator: tyuu@on.rim.or.jp
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+040413

tyuu $B$G$9!#(B

> > ----------------------------------------
> > % telnet www.google.co.jp 80
> > GET / HTTP/1.0
> > 
> > ----------------------------------------
> 
> $B!!(Bprimitive $B$JItJ,$KLdBj$N860x$r5a$a$k:]$K(B telnet $B$O>oEe<jCJ(B
> $B$G$O$"$j$^$9$,!"(BHTTP $B$K4X$7$F$O4v$D$+$N(B header field $B$,I,?\(B
> $B$K$J$C$F$$$k(B HTTP server $B$,0lHLE*$J$N$G$3$l$@$1$G$OIT==J,$J(B
> $B>l9g$,B?$$$H;W$$$^$9!#(B

HTTP/1.0 $B$C$F(B Host: $BI,?\$8$c$J$+$C$?$H;W$$$^$7$?$1$I!"0c$$$^$7$?$+!)(B
# HTTP/1.0 $B$O!"$&$m3P$($J$s$G$9!#(B
$BDL?.3NG'DxEY$K$O(B sample $B$H$7$F(B HTTP/1.0 $B$G==J,$8$c$J$$$+$J$H!";W$$$^$7$?!#(B


$B$A$J$_$K(B Host: localhost $B$G$OBLL\$G$9$h$M!#(B
Host: $B$K$OAj<j$NL>A0$r;XDj$7$F$"$2$J$$$H!#(B
VirtualHost $B$r;XDj$7$F$$$k(B Apache $B$J$I$GL>A02r7h$9$k$N$KI,MW$G$9$+$i!#(B
# $BF1$8%5!<%P$G(B www.afo.com $B$H(B www.bfo.com $B$r1?1D$7$F$$$k>l9g$J$I(B

HTTP/1.1 $B$GDL?.$9$k>l9g$O!"(B
Host $B%X%C%@%U%#!<%k%I$r4^$a$J$1$l$P$J$i$J$$$N$G!"0J2<$N$h$&$K$J$j$^$9!#(B
--------------------------------------------------
% telnet www.google.co.jp 80
GET / HTTP/1.1
Host: www.google.co.jp
--------------------------------------------------
$B$A$J$_$K(B HTTP/1.1 $B$GDL?.$5$l$?>l9g!"(B
HTTP/1.1 $B%5!<%P$O(B Host $B%X%C%@%U%#!<%k%I$,$J$$(B HTTP/1.1 $B%j%/%(%9%H%a%C%;!<%8$K$O(B
400(Bad Request) $B%9%F!<%?%9%3!<%I$rJV$5$J$1$l$P$J$j$^$;$s!#(B

$B$J$N$G!"0J2<$N7o$G$O(B HTTP/1.1 $B$GDL?.$r9T$J$C$F$$$k$N$@$H;W$$$^$9$,!"(B
HTTP/1.0 $B$GDL?.$7$F$$$?$@$1$l$PK\J8$rJV$9$H;W$$$^$9!#(B

> $B!!>/$J$/$H$b(B Host: $B$/$i$$$O$D$1$F$"$2$J$$$H(B reject $B$5$l$F$7(B
> $B$^$$$^$9$h!#(BApache $B$b(B IIS $B$bI8=`@_Dj$@$H!V(B400 Bad Request$B!W(B
> $B$rJV$9$h$&$G$9!#CM$O(B localhost $B$G$b2?$G$b$$$$$N$GL>>h$j$^$7(B
> $B$g$&!#(B



> $B!!$"$H!"(Breachability $B$N8!>Z$J$i(B GET $B$h$j(B OPTIONS $B$NJ}$,E,@Z(B
> $B$G$O!)(Bbody $B$,BgNL$K$"$C$?;~$N$3$H$b9M$($k$H$;$a$F(B HEAD $B$NJ}(B
> $B$,L5Fq$+$H!#(B

head $B$bNI$$$G$9$M!#(B
$B$G$b$3$l$b(B HTTP/1.1 $B$G$9$M!#(B

$B$"$H(B IIS $B$H$+0lIt(B Apache $B$O!"%a%C%;!<%8%\%G%#$rA4ItJV$7$F$7$^$&;R$b$$$^$9!#(B
# Apache $B$O!"@_Dj<!Bh$@$H;W$&$N$G$9$,!"$=$s$J4oMQ$J@_Dj$I$3$G$9$k$N$+!)(B
# $B@N!"$=$s$JE[$,5o$?$H$$$&7P83CL$G$9!#(B
# IIS $B$O!"$I$&$J$C$F$k$s$@$+!"$5$C$Q$j$o$+$j$^$;$s(B m(_ _)m


OPTIONS $B$O!"8D?ME*$K7y$$(B($B%"%?%C%/$C$]$$(B)$B$G!"(B
$BB>$N%5%$%H$K$O!"$d$C$?;v$J$$$G$9!#(B

$BCN$C$F$$$k$N$O(B * $B$r;XDj$7$F%5!<%PA4BN$+!"%j%=!<%9$r;XDj$7$F!"(B
$B$=$N%j%=!<%9$HDL?.;~$KMxMQ2DG=$J%*%W%7%g%s$r?R$M$k$+$@$1$G$9!#(B

$BB>$K;H$$J}$,$"$l$P!"@'Hs!"$465<x$/$@$5$$!#(B

$B$A$J$_$K(B my test server.
----------------------------------------
% telnet localhost 80
Escape character is '^]'.
OPTIONS / HTTP/1.1
Host: afo

HTTP/1.1 200 OK
Date: Wed, 21 Apr 2004 16:24:48 GMT
Content-Length: 0
Allow: GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, PATCH, PROPFIND, PROPPATCH, MKCOL, COPY, MOVE
, LOCK, UNLOCK, TRACE
----------------------------------------
# $B$&!"CN$i$J$$(B method $B$,$"$k!#(B


> $B!t!!$H$$$&OC$r$4B8CN$J$$$H$9$k$H!"K\Ev$K(B telnet $B$G(B HTTP $B$r$*(B
> $B!tOC$7$7$?$3$H$J$s$+$J$+$C$?$j$O$7$^$;$s!)(B

$B$@$$$?$$!"CN<1$H$7$F$O!"$3$NDxEY$N$b$N$G$9!#(B
# RFC $B$N(B xx $B$@$h!"$H$+$9$0K:$l$A$c$C$F(B :-p

$B<BL3$O(B 100 $BBf$0$i$$$N(B HTTP $B%5!<%P$N<BF/4F;k$H$+!"(B
basic $BG'>Z$N(B crack ($BK\?M$N5v2D$r$b$i$C$F$N(B demo) $B$H$+!"(B
$B:G6aN.9T$N(B BB router $B$N(B http $B7PM3$N@_Dj$r<+F0$G$H$+$G$9!#(B

Apache $B$N2r@O$H$+$O!"<j$,=P$^$;$s$N$G!"(B
$B%5!<%P%5%$%I$O!"$+$i$-$7$G$9!#(B

$B$7$i$$MM$K$O!"B@EaBG$A$G$-$J$$$H;W$$$^$9$N$G!"(B
$B5!2q$,$"$j$^$7$?$i!"@'Hs!"$4;XF3$4J\Z%$NDx!"$h$m$7$/$*4j$$$7$^$9!#(B


by tyuu.
