When was the last time you used #curl to do telnet over an HTTPS proxy?
0 Boosts
0 Likes
to be clear: with #curl you can do any of the TCP based protocols over any of the proxy models we support, or even combine socks proxy + http(s) proxy. Experimentally you can also do HTTP/3 over the http(s) ones.
@bagder This sounds like a solution to an OT (since we only run legacy stuff) problem
@bagder well I am now just tempted to try this out.
@bagder it's monday and i feel that's a trick question *walks to over the whiteboard*
@dasrecht its actually not, it was just that we got an issue reported when doing this and it struck me that this is probably a protocol combination that not a single user ever actually used...
@bagder wowza definitively in the more edge case scenarios 😊 i didn't encounter that yet... i have a plethora of other weird edge case things tho :D
@bagder never and what did you do with Daniel?!
@gjherbiet @jpmens as long as your proxy allows you to CONNECT to that port and you can pipe the protocol parts into curl, sure
@bagder
I vaguely remember that Apache has a module where you can pass it a magic string to CONNECT and it will tunnel to the local sshd...
@gjherbiet @jpmens
@bagder I suspect you might not even get a very high number of people who do something different than http/https requests with curl.
@bagder I'm going to need a diagram for that protocol flow.
This sounds like some kind of covert connect back shell thing.
@bagder I suspect lots might not realise they are?
@bagder either someone has a very odd notion of fun or is in a situation where the appropriate tool for the job is not available.