data.com/portal/ticket/list?offset=10&host_header=host
Currently it returns 302 basically redirecting invalid host which is not
right.
I found this link , solution recommended by Tomcat team "Andre".
https://stackoverflow.com/questions/44054591/tomcat-virtual-host-to-prevent-i
Pradeep,
On 9/13/21 09:35, Pradeep wrote:
I am using Tomcat 7.0.57, I can't change the Tomcat version now.
Running my previous "forge" file (with GET http://www.microsoft.com/,
the the forged Host header) against Tomcat 7.0.57:
$ nc localhost 8080 < forge
HTTP/1.1 200 OK
Server: Apache-Coyo
Pradeep,
On 9/13/21 09:35, Pradeep wrote:
Hi Chris,
I am using Tomcat 7.0.57, I can't change the Tomcat version now. I tried
adding Virtual Host with RemotrHostValve to allow list of hosts but still
no luck.
This is because you are trying to block the client by their identity
(like "local
Hi Chris,
I am using Tomcat 7.0.57, I can't change the Tomcat version now. I tried
adding Virtual Host with RemotrHostValve to allow list of hosts but still
no luck.
Regards,
Pradeep
On Mon, 13 Sep 2021, 2:28 pm Christopher Schultz, <
ch...@christopherschultz.net> wrote:
> Pradeep,
>
> On 9/
Pradeep,
On 9/10/21 17:38, Pradeep wrote:
My application is HTTPS not HTTP and now one of the application security
platforms WhitHatSec raised this vulnerability issue.
I tried to reproduce your "attack" on Tomcat 8.5.59, like this:
$ cat forge
GET www.microsoft.com/ HTTP/1.1
Host: www.micro
Hi Chris,
My application is HTTPS not HTTP and now one of the application security
platforms WhitHatSec raised this vulnerability issue. I tried the above
configuration mentioned but no luck but this configuration advised in
Apache website
http://tomcat.apache.org/tomcat-9.0-doc/config/host.html#
Pradeep,
On 9/10/21 06:19, Pradeep wrote:
Hi Team,
I need your help to fix HTTP Host header attacks.
I'm currently in the process of trying to fix a site vulnerability,
basically it is one type of the "Improper Input Handling" attack.
Let's say my website is www.mywebsite.com and there is hack
Hi Team,
I need your help to fix HTTP Host header attacks.
I'm currently in the process of trying to fix a site vulnerability,
basically it is one type of the "Improper Input Handling" attack.
Let's say my website is www.mywebsite.com and there is hacker's website
www.hacker.com
Whenever there is
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
André,
On 5/22/17 3:19 PM, André Warnier (tomcat) wrote:
> On 22.05.2017 20:35, Cai, Charles [COMRES/RTC/RTC] wrote:
>> Here attached is my server.xml host configure:
>> _
Charles Cai | T +1 440 329 4888
-Original Message-
From: André Warnier (tomcat) [mailto:a...@ice-sa.com]
Sent: Monday, May 22, 2017 3:19 PM
To: users@tomcat.apache.org
Subject: Re: Question about Tomcat Virtual Host to prevent
Improper-Input-Handling attack
On 22.05.2017 20:35, Cai
twice : once for the
"defaultlocalhost" Host, and once for the "www.mywebsite.com" Host.
Thank you in advance.
More references about the attack here :
http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html
http://projects.webappsec.org/w/page/13246933
ng
Original Post on stackoverflow:
https://stackoverflow.com/questions/44054591/tomcat-virtual-host-to-prevent-improper-input-handling-attack
Charles Cai | Web Application Developer | RIDGID
Emerson Commercial & Residential Solutions |
charles@emerson.com
-
On Thu, Jul 24, 2014 at 6:25 PM, Arya Farzan wrote:
> I am using Tomcat by itself. It is pretty much a default installation using
> apt-get on Debian.
Error #1 - dump that and install a real Tomcat.
> I changed the port from 8080 to port 80
Error #2 - don't run Tomcat as root; use jsvc, a prox
Thank you. I changed it to your example and now it's working
On Thu, Jul 24, 2014 at 8:35 PM, Igal @ getRailo.org
wrote:
> I prefer to use Context/docBase instead of Host/appBase
>
> try this:
>
>
>mysite.com
>
>
>
>
>
>
>
> On 7/24/2014 6:28 PM, Arya Farzan wrote:
>
>> I just tried t
I prefer to use Context/docBase instead of Host/appBase
try this:
mysite.com
On 7/24/2014 6:28 PM, Arya Farzan wrote:
I just tried this with IE and it says "The webpage cannot be found"
in google chrome source is 100% blank
On Thu, Jul 24, 2014 at 8:20 PM, Igal Sapir wrote:
C
I just tried this with IE and it says "The webpage cannot be found"
in google chrome source is 100% blank
On Thu, Jul 24, 2014 at 8:20 PM, Igal Sapir wrote:
> Check with view source on the blank page and see if you get anything there
> On Jul 24, 2014 6:16 PM, "Jordan Michaels" wrote:
>
> > H
Hi Jordan
I am using Tomcat by itself. It is pretty much a default installation using
apt-get on Debian. The only changes I made are:
I changed the port from 8080 to port 80
And I changed AUTHBIND=no to AUTHBIND=yes
On Thu, Jul 24, 2014 at 8:16 PM, Jordan Michaels
wrote:
> Hi Arya,
>
> Are yo
Check with view source on the blank page and see if you get anything there
On Jul 24, 2014 6:16 PM, "Jordan Michaels" wrote:
> Hi Arya,
>
> Are you using a web server like Apache in front of Tomcat, or are you
> hitting the Tomcat port directly? This will tell us if the problem is
> somewhere in
Hi Arya,
Are you using a web server like Apache in front of Tomcat, or are you
hitting the Tomcat port directly? This will tell us if the problem is
somewhere in your connector setup or not.
Any clues in your catalina.out log file?
Warm Regards,
Jordan Michaels
On 07/24/2014 06:03 PM, Arya
Hello
I also asked this on Stackoverflow but no one has commented or answered.
I've been trying to configure tomcat for multiple domains and everything I
have tried was unsuccessful.
I added this to /etc/tomcat7/server.xml
mysite.com
and I created the folder /var/lib/tomcat7/webapps/mysite
> From: gnix infosoft noida [mailto:garg.may...@gmail.com]
> Subject: tomcat virtual host or directory
>
> How tio configure virtual host in tomcat 5.5
Did you try to look at the Tomcat doc before posting?
http://tomcat.apache.org/tomcat-5.5-doc/virtual-hosting-howto.html
-
How tio configure virtual host in tomcat 5.5
--
View this message in context:
http://www.nabble.com/tomcat-virtual-host-or-directory-tp23780270p23780270.html
Sent from the Tomcat - User mailing list archive at Nabble.com
[EMAIL PROTECTED]
> To: users@tomcat.apache.org
> Subject: Re: tomcat virtual host
>
> Hi André and every body,
>
> Thank you very mutch for the details:))
>
> Tail
>
> - Mail Original -
> De: "André Warnier" <[EMAIL PROTECTED]>
> À: "To
Objet: Re: tomcat virtual host
Caldarale, Charles R wrote:
>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
>> Subject: Re: tomcat virtual host
>>
>> status, or does something else happen? Is the DNS name
>> "mysvn" defined on the machine your browser
Caldarale, Charles R wrote:
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Subject: Re: tomcat virtual host
status, or does something else happen? Is the DNS name
"mysvn" defined on the machine your browser is running on?
Internet Explorer could not display this web page
i te
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> status, or does something else happen? Is the DNS name
> "mysvn" defined on the machine your browser is running on?
>
> Internet Explorer could not display this web page
>
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> I configured localy a virtual host with tomcat 6
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
> http://mysvn:8080/
Wh
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> I configured localy a virtual host with tomcat 6
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
> http://mysvn:8080/
Wh
>Sorry, but your question does not make any sense to me.
>I don't see anything stopping you from adding as many virtual hosts as you
>want. If you need a different default webapp for each >virtual host, then
>each will have to specify a different appBase attribute. Any webapps
>that you wa
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> But, if a want to add a second application web , for example
> mysvn2 and i do not remove the mysvn,
> that is why I would like to use the virtual host.
Sorry, but your question does not
"Tomcat Users List"
> Envoyé: Jeudi 20 Novembre 2008 16:23:40 GMT +01:00 Amsterdam / Berlin /
> Berne / Rome / Stockholm / Vienne
> Objet: RE: tomcat virtual host
>
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> > Subject: Re: tomcat virtual host
> >
- Mail Original -
De: "Charles R Caldarale" <[EMAIL PROTECTED]>
À: "Tomcat Users List"
Envoyé: Jeudi 20 Novembre 2008 16:23:40 GMT +01:00 Amsterdam / Berlin / Berne /
Rome / Stockholm / Vienne
Objet: RE: tomcat virtual host
> From: [EMAIL PROTECTED] [mailt
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Subject: Re: tomcat virtual host
>
> But if i do this, how can i access de tomcat manager ? with
> other name, but the examples will work ?
By using their URLs?
http://mysvn:8080/manager/html
http://mysvn:8080/examples
>I agree with the other response: rename your war to ROOT.war, so that it is
>the root web application.
>By the way, it is worth changing only one thing at once in your URL when
>testing. You are changing two.
>Does http://localhost:8080/ work?
>Does http://mysvn:8080/svnrepository work?
But
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> When i tape http://mysvn:8080/ in browser to access to my web
> application, i have this :
> Internet Explorer cannot display the web page
> but when i tape http://localhost:8080/svnrepository; i access
> correctely to my application.
> Find fil
> I deployed my webapp svn.war on webapps directory of tomcat 6.
> I configured localy a virtual host with tomcat 6, but it does
> not work.
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
> http://mysvn:8080/
>
> This is a part of server.xm
Can you be a bit more specific about the problem ?
"it does not work" does not help much.
[EMAIL PROTECTED] wrote:
Hi,
I deployed my webapp svn.war on webapps directory of tomcat 6.
I configured localy a virtual host with tomcat 6, but it does not work.
This url works :
http://localhost:8080/s
I suspect he needs to rename svn.war to ROOT.war
-- David
Sent from my iPod
On Nov 20, 2008, at 8:47 AM, Peter Crowther
<[EMAIL PROTECTED]> wrote:
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
I deployed my webapp svn.war on webapps directory of tomcat 6.
I configured localy a virtual
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> I deployed my webapp svn.war on webapps directory of tomcat 6.
> I configured localy a virtual host with tomcat 6, but it does
> not work.
> This url works :
> http://localhost:8080/svn/
>
> But when i use the virtual host, it does not works :
>
Hi,
I deployed my webapp svn.war on webapps directory of tomcat 6.
I configured localy a virtual host with tomcat 6, but it does not work.
This url works :
http://localhost:8080/svn/
But when i use the virtual host, it does not works :
http://mysvn:8080/
This is a part of server.xml :
...
Thank you,
it should be the answer. I must only find which service or program uses
the file "hosts", because I can not modify it (it is not read only)!
Sam
> If you are using windows you could try added a line like the following
> to the c:\WINDOWS\system32\drivers\etc\hosts file.
>
> 127.0.0.1
On 9/21/06, Samsamoddin Rajaei <[EMAIL PROTECTED]> wrote:
I am trying to test my virtual hosts and my tomcat configuration on my
local pc (Windows XP).
When I start tomcat they are no exceptions and everything seems to be ok.
When I call the page "http://127.0.0.1:9080/"; I see the defaultHos
If you are using windows you could try added a line like the following
to the c:\WINDOWS\system32\drivers\etc\hosts file.
127.0.0.1 www.virtualhost1.com
Then open www.virtualhost1.com in your web browser. the same this
should be possible from linux but i dont have my linux hat on at the
moment.
Hi everybody,
(I am newbie in this list!)
I am trying to test my virtual hosts and my tomcat configuration on my
local pc (Windows XP). I am using tomcat 5.0.28 and have configured
following virtual hosts in my server.xml:
issues. I am looking at clean restart of a tomcat
virtual host.
regards,
Vasanth
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
t send it on requests 2-n, and therefore you
really don't have sesion tracking. Kind of useless ;-)
Tim
-Original Message-
From: news [mailto:[EMAIL PROTECTED] On Behalf Of matador
Sent: Tuesday, February 07, 2006 9:00 PM
To: users@tomcat.apache.org
Subject: RE: newbie:access to
Dieter Schicker <[EMAIL PROTECTED]> wrote in
news:[EMAIL PROTECTED]:
> If you can't mount / because you also run php on apache, you can afaik
> only mount specific directories of tomcat in Apache, e.g.
> http://foo.bar.com:8080/jsp-examples =>
> http://foo.bar.com/jsp-examples. In Google you ca
"Tim Lucia" <[EMAIL PROTECTED]> wrote in
news:[EMAIL PROTECTED]:
> A few weeks ago, I asked a similar question which went unanswered.
> Basically, I want to have the user request www.somewhere.com but have
> Apache forward that to tomcatserver:8009/someNonRootContext/ so I can
> have different ve
nal Message-
> From: Dieter Schicker [mailto:[EMAIL PROTECTED]
> Sent: Sunday, February 05, 2006 5:44 PM
> To: Tomcat Users List
> Subject: Re: newbie:access tomcat virtual host via apache
>
>
> I also asked a similar question which also went unanswered.
> Maybe it
From: Dieter Schicker [mailto:[EMAIL PROTECTED]
Sent: Sunday, February 05, 2006 4:46 AM
To: Tomcat Users List
Subject: Re: newbie:access tomcat virtual host via apache
If you can't mount / because you also run php on apache, you can afaik
only mount specific directories of tomcat in Apache, e
tomcat virtual host via apache
If you can't mount / because you also run php on apache, you can afaik
only mount specific directories of tomcat in Apache, e.g.
http://foo.bar.com:8080/jsp-examples => http://foo.bar.com/jsp-examples.
In Google you can find many examples for this configuratio
If you can't mount / because you also run php on apache, you can afaik
only mount specific directories of tomcat in Apache, e.g.
http://foo.bar.com:8080/jsp-examples => http://foo.bar.com/jsp-examples.
In Google you can find many examples for this configuration.
Didi
matador wrote:
runnning
runnning tomcat 5.x on windows with apache 2.0.5x with modjk. tomcat on
8080 and apache on 80.
so for a given webapp at foo.bar.com that really is served up by tomcat on
8080 as http://foo.bar.com:8080. how to get apache to see it so that i can
access it as http://foo.bar.com without the port
53 matches
Mail list logo
