Attack Alert :: Superglobal Origins

Attack Alert :: Superglobal Origins

[]$ nc example.net 80
GET /any.php/0wn3ed HTTP/1.1
Host: 0wn3d
User-Agent: 0wn3d
Accept: 0wn3d
Accept-Language: 0wn3d
Accept-Encoding: 0wn3d
Accept-Charset: 0wn3d
Keep-Alive: 0wn3d
Connection: 0wn3d
Referer: 0wn3d
Cookie: 0wn3d=1337
...
Response:
  1. $_SERVER = Array (
  2.   'PHP_SELF'             => '/any.php/0wn3ed'
  3.   'HTTP_ACCEPT'          => '0wn3d',
  4.   'HTTP_ACCEPT_CHARSET'  => '0wn3d',
  5.   'HTTP_ACCEPT_ENCODING' => '0wn3d',
  6.   'HTTP_ACCEPT_LANGUAGE' => '0wn3d',
  7.   'HTTP_CACHE_CONTROL'   => '0wn3d',
  8.   'HTTP_CONNECTION'      => '0wn3d',
  9.   'HTTP_COOKIE'          => '0wn3d',
  10.   'HTTP_HOST'            => '0wn3d',
  11.   'HTTP_KEEP_ALIVE'      => '0wn3d',
  12.   'HTTP_REFERER'         => '0wn3d',
  13.   'HTTP_USER_AGENT'      => '0wn3d',
  14.   'SERVER_NAME'          => '0wn3d',
  15.   ...