metadata.301party.com: 169.254.169.254 ipv6.metadata.301party.com: [::169.254.169.254] Why not just one name with both A and AAAA records? ...er, and why not fd00:ec2::254? (I now suspect that there's a subjoke here that I'm missing)
301party.com: Intentionally open redirect
11–16 of 16 posts
Re: 301party.com: Intentionally open redirect
#12Re: 301party.com: Intentionally open redirect
#13"You cannot add 127.0.0.1 or localhost as a callback URL" ...watch me.
Re: 301party.com: Intentionally open redirect
#14Go's http.Redirect function allows non-3xx statuses, and also renders a trivial page with a status message and link:
https://301party.com/451?url=javascript:alert(%27hello%27)
Alas not infinitely recursive but enough to make your browser give up:
https://301party.com/301?url=/301?url=/301?url=/301?url=/301...
[edit to add:] https://301party.com/0 causes a panic
Re: 301party.com: Intentionally open redirect
#15Fortunately, redirection to a file: URL will result in a browser error. Unfortunately, the browser does not explain what is wrong (although the redirect can be viewed in the developer tools, you might not know to look there, and it still doesn't have an error message to explain the problem).
Re: 301party.com: Intentionally open redirect
#16I found a couple of fun tricks you can do with this (for some definition of "fun" anyway). Go's http.Redirect function allows non-3xx statuses, and also renders a trivial page with a status message and link: https://301party.com/451?url=javascript:alert(%27hello%27) Alas not infinitely recursive but enough to make your browser give up: https://301party.com/301?url=/301?url=/301?url=/301?url=/301... [edit to add:] htt…