http2fuzz
http2fuzz copied to clipboard
Published
20 hours ago •
c0nrad
c0nrad
Cannot connect to Jetty server
I've tried to use http2fuzz against the jetty server, but cannot get it to connect and recognize HTTP2!
simplest way to demonstrate this is with:
./http2fuzz --target "webtide.com:443"
Which says webtide.com is not running HTTP2, but all recent browsers see this as a HTTP2 server.
Debugging against a local server indicates that ALPN is not being used to send a protocol choice. I have tried a h2c connector, but the connection is definitely being made using TLS?
You're the second person to bring this up to me. Do you have an example Jetty server I can test against? webtide.com:443 appears down
@c0nrad webtide.com:443 is up now.
If you have a distribution of jetty-9.3.x, the you can easily run a http2 server:
mkdir test
cd test
java -jar $JETTY_HOME/start.jar --add-to-startd=http,https,http2,http2c,deploy
java -jar $JETTY_HOME/start.jar
That is running with an empty webapps directory.. but a 404 will confirm that http2 is working.
What command did you use to run it? It's fuzzing fine with:
go build
./http2fuzz --target webtide.com:443
@c0nrad
I ran exactly that command and the result is that every fuzzer gives up with "sever[sic] doesn't support http2"
gregw@Tile440: ~/src/http2fuzz (master)
[2002] ./http2fuzz --target webtide.com:443
2015/12/02 10:52:28 Connecting to webtide.com:443 ...
2015/12/02 10:52:29 Connected to 107.22.210.238:443
2015/12/02 10:52:29 sever doesn't support http2
2015/12/02 10:52:29 Connecting to webtide.com:443 ...
2015/12/02 10:52:29 Connecting to webtide.com:443 ...
2015/12/02 10:52:30 Connected to 107.22.210.238:443
2015/12/02 10:52:30 sever doesn't support http2
2015/12/02 10:52:30 Connected to 107.22.210.238:443
2015/12/02 10:52:30 sever doesn't support http2
2015/12/02 10:52:30 Connecting to webtide.com:443 ...
2015/12/02 10:52:30 Connecting to webtide.com:443 ...
2015/12/02 10:52:30 Connecting to webtide.com:443 ...
2015/12/02 10:52:31 Connected to 107.22.210.238:443
2015/12/02 10:52:31 sever doesn't support http2
2015/12/02 10:52:31 Connected to 107.22.210.238:443
2015/12/02 10:52:31 sever doesn't support http2
2015/12/02 10:52:31 Connecting to webtide.com:443 ...
2015/12/02 10:52:31 Connected to 107.22.210.238:443
2015/12/02 10:52:31 sever doesn't support http2
2015/12/02 10:52:31 Connecting to webtide.com:443 ...
2015/12/02 10:52:31 Connecting to webtide.com:443 ...
2015/12/02 10:52:31 Connecting to webtide.com:443 ...
2015/12/02 10:52:32 Connected to 107.22.210.238:443
2015/12/02 10:52:32 sever doesn't support http2
2015/12/02 10:52:32 Connecting to webtide.com:443 ...
2015/12/02 10:52:32 Connected to 107.22.210.238:443
2015/12/02 10:52:32 sever doesn't support http2
2015/12/02 10:52:32 Connected to 107.22.210.238:443
2015/12/02 10:52:32 sever doesn't support http2
2015/12/02 10:52:32 Connected to 107.22.210.238:443
2015/12/02 10:52:32 sever doesn't support http2
2015/12/02 10:52:32 Connecting to webtide.com:443 ...
2015/12/02 10:52:32 Connecting to webtide.com:443 ...
2015/12/02 10:52:32 Connecting to webtide.com:443 ...
2015/12/02 10:52:32 Connecting to webtide.com:443 ...
2015/12/02 10:52:33 Connected to 107.22.210.238:443
2015/12/02 10:52:33 sever doesn't support http2
2015/12/02 10:52:33 Connecting to webtide.com:443 ...
2015/12/02 10:52:33 Connected to 107.22.210.238:443
2015/12/02 10:52:33 sever doesn't support http2
2015/12/02 10:52:33 Connecting to webtide.com:443 ...
2015/12/02 10:52:33 Connected to 107.22.210.238:443
2015/12/02 10:52:33 sever doesn't support http2
2015/12/02 10:52:33 Connecting to webtide.com:443 ...
2015/12/02 10:52:33 Connected to 107.22.210.238:443
2015/12/02 10:52:33 sever doesn't support http2
2015/12/02 10:52:33 Connected to 107.22.210.238:443
2015/12/02 10:52:33 sever doesn't support http2
Stopping PingFuzzer: sever doesn't support http2
2015/12/02 10:52:33 Connecting to webtide.com:443 ...
2015/12/02 10:52:33 Connecting to webtide.com:443 ...
2015/12/02 10:52:34 Connected to 107.22.210.238:443
2015/12/02 10:52:34 sever doesn't support http2
2015/12/02 10:52:34 Connecting to webtide.com:443 ...
2015/12/02 10:52:34 Connected to 107.22.210.238:443
2015/12/02 10:52:34 sever doesn't support http2
2015/12/02 10:52:34 Connecting to webtide.com:443 ...
2015/12/02 10:52:34 Connected to 107.22.210.238:443
2015/12/02 10:52:34 sever doesn't support http2
Stopping RawFrameFuzzer: sever doesn't support http2
2015/12/02 10:52:34 Connected to 107.22.210.238:443
2015/12/02 10:52:34 sever doesn't support http2
2015/12/02 10:52:34 Connecting to webtide.com:443 ...
2015/12/02 10:52:34 Connected to 107.22.210.238:443
2015/12/02 10:52:34 sever doesn't support http2
2015/12/02 10:52:34 Connecting to webtide.com:443 ...
2015/12/02 10:52:34 Connecting to webtide.com:443 ...
2015/12/02 10:52:35 Connected to 107.22.210.238:443
2015/12/02 10:52:35 sever doesn't support http2
Stopping PriorityFuzzer: sever doesn't support http2
2015/12/02 10:52:35 Connecting to webtide.com:443 ...
2015/12/02 10:52:35 Connected to 107.22.210.238:443
2015/12/02 10:52:35 sever doesn't support http2
2015/12/02 10:52:35 Connecting to webtide.com:443 ...
2015/12/02 10:52:35 Connected to 107.22.210.238:443
2015/12/02 10:52:35 sever doesn't support http2
2015/12/02 10:52:35 Connecting to webtide.com:443 ...
2015/12/02 10:52:35 Connected to 107.22.210.238:443
2015/12/02 10:52:35 sever doesn't support http2
2015/12/02 10:52:35 Connected to 107.22.210.238:443
2015/12/02 10:52:35 sever doesn't support http2
2015/12/02 10:52:35 Connecting to webtide.com:443 ...
2015/12/02 10:52:35 Connecting to webtide.com:443 ...
2015/12/02 10:52:35 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
Stopping PingFuzzer: sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
Stopping WindowUpdate Fuzzer: sever doesn't support http2
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
Stopping ResetFuzzer: sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connected to 107.22.210.238:443
2015/12/02 10:52:36 sever doesn't support http2
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:36 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
Stopping PriorityFuzzer: sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
Stopping PriorityFuzzer: sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
Stopping PingFuzzer: sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:37 Connected to 107.22.210.238:443
2015/12/02 10:52:37 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:37 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
Stopping PingFuzzer: sever doesn't support http2
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
Stopping SettingsFuzzer: sever doesn't support http2
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:38 Connected to 107.22.210.238:443
2015/12/02 10:52:38 sever doesn't support http2
2015/12/02 10:52:38 Connecting to webtide.com:443 ...
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
2015/12/02 10:52:39 Connecting to webtide.com:443 ...
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
2015/12/02 10:52:39 Connecting to webtide.com:443 ...
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
Stopping DataFuzzer: sever doesn't support http2
2015/12/02 10:52:39 Connecting to webtide.com:443 ...
2015/12/02 10:52:39 Connecting to webtide.com:443 ...
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
2015/12/02 10:52:39 Connected to 107.22.210.238:443
2015/12/02 10:52:39 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:39 Connecting to webtide.com:443 ...
2015/12/02 10:52:39 Connecting to webtide.com:443 ...
2015/12/02 10:52:40 Connected to 107.22.210.238:443
2015/12/02 10:52:40 sever doesn't support http2
2015/12/02 10:52:40 Connected to 107.22.210.238:443
2015/12/02 10:52:40 sever doesn't support http2
2015/12/02 10:52:40 Connected to 107.22.210.238:443
2015/12/02 10:52:40 sever doesn't support http2
2015/12/02 10:52:40 Connected to 107.22.210.238:443
2015/12/02 10:52:40 sever doesn't support http2
2015/12/02 10:52:40 Connected to 107.22.210.238:443
2015/12/02 10:52:40 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
2015/12/02 10:52:40 Connected to 107.22.210.238:443
2015/12/02 10:52:40 sever doesn't support http2
Stopping ContinuationFuzzer: sever doesn't support http2
2015/12/02 10:52:40 Connecting to webtide.com:443 ...
2015/12/02 10:52:40 Connecting to webtide.com:443 ...
2015/12/02 10:52:40 Connecting to webtide.com:443 ...
2015/12/02 10:52:40 Connecting to webtide.com:443 ...
2015/12/02 10:52:40 Connecting to webtide.com:443 ...
2015/12/02 10:52:41 Connected to 107.22.210.238:443
2015/12/02 10:52:41 sever doesn't support http2
2015/12/02 10:52:41 Connecting to webtide.com:443 ...
2015/12/02 10:52:41 Connected to 107.22.210.238:443
2015/12/02 10:52:41 sever doesn't support http2
2015/12/02 10:52:41 Connected to 107.22.210.238:443
2015/12/02 10:52:41 sever doesn't support http2
Stopping PushPromiseFuzzer: sever doesn't support http2
2015/12/02 10:52:41 Connecting to webtide.com:443 ...
2015/12/02 10:52:41 Connected to 107.22.210.238:443
2015/12/02 10:52:41 sever doesn't support http2
Stopping RawTCPFuzzer: sever doesn't support http2
2015/12/02 10:52:41 Connected to 107.22.210.238:443
2015/12/02 10:52:41 sever doesn't support http2
2015/12/02 10:52:41 Connecting to webtide.com:443 ...
2015/12/02 10:52:42 Connected to 107.22.210.238:443
2015/12/02 10:52:42 sever doesn't support http2
Stopping RawTCPFuzzer: sever doesn't support http2
2015/12/02 10:52:42 Connected to 107.22.210.238:443
2015/12/02 10:52:42 sever doesn't support http2
2015/12/02 10:52:42 Connected to 107.22.210.238:443
2015/12/02 10:52:42 sever doesn't support http2
2015/12/02 10:52:42 Connecting to webtide.com:443 ...
2015/12/02 10:52:42 Connecting to webtide.com:443 ...
2015/12/02 10:52:43 Connected to 107.22.210.238:443
2015/12/02 10:52:43 sever doesn't support http2
2015/12/02 10:52:43 Connecting to webtide.com:443 ...
2015/12/02 10:52:43 Connected to 107.22.210.238:443
2015/12/02 10:52:43 sever doesn't support http2
Stopping RawTCPFuzzer: sever doesn't support http2
2015/12/02 10:52:44 Connected to 107.22.210.238:443
2015/12/02 10:52:44 sever doesn't support http2
Stopping PushPromiseFuzzer: sever doesn't support http2
2015/12/02 10:52:44 Connecting to webtide.com:443 ...
2015/12/02 10:52:45 Connected to 107.22.210.238:443
2015/12/02 10:52:45 sever doesn't support http2
Stopping ContinuationFuzzer: sever doesn't support http2
2015/12/02 10:52:45 Connecting to webtide.com:443 ...
2015/12/02 10:52:45 Connected to 107.22.210.238:443
2015/12/02 10:52:45 sever doesn't support http2
Stopping WindowUpdate Fuzzer: sever doesn't support http2
2015/12/02 10:52:45 Connecting to webtide.com:443 ...
2015/12/02 10:52:46 Connected to 107.22.210.238:443
2015/12/02 10:52:46 sever doesn't support http2
Stopping PriorityFuzzer: sever doesn't support http2
2015/12/02 10:52:46 Connecting to webtide.com:443 ...
2015/12/02 10:52:47 Connected to 107.22.210.238:443
2015/12/02 10:52:47 sever doesn't support http2
Stopping PingFuzzer: sever doesn't support http2
2015/12/02 10:52:47 Connecting to webtide.com:443 ...
2015/12/02 10:52:48 Connected to 107.22.210.238:443
2015/12/02 10:52:48 sever doesn't support http2
Stopping HeaderFuzzer: sever doesn't support http2
/me scratches head.
Could you print out state right after this line: https://github.com/c0nrad/http2fuzz/blob/5b529b8fad67301deb04361331f6a595f4188b3e/fuzzer/connection.go#L351