Today, in this blog post, I’ll be sharing with you the details about the very popular VPN app HTTP Injector. Read till the end of this post very carefully and you”ll be able to create config file of your own. The basic idea is the same over all networks with some slight changes in the payload.
So without any delay, let’s get started!
Method- There are a lot of methods but the is often used used methods are:
– GET
– HEAD
– POST
– DELETE
– TRACE
– CONNECT
Average using GET or HEAD
Line, there are four types of line that can be used are:
[Cr] = Carriage Return, U + 000D
[Lf] = Line Feed, U + 000A
[Crlf] = CR (U + 000D) followed by LF (U + 000A)
[Lfcr] = LF (U + 000A) followed by CR (U + 000D)
[Crlf] [crlf] = To indicate the end of the HTTP header
Average – Average use [CRLF]
Protocol version- There are three:
– HTTP/2.0
– HTTP/1.1
– HTTP/1.0
HTTP/1.1 usually in BUG while HTTP/1.0 the protocol to SSH. Depending on the type
Connection Type- There are two
[realData] = connection at the end to have a 2 LINE [crlf][crlf]
For example, if using SSH = CONNECT ipssh:portssh HTTP/1.0[crlf][crlf]
Depending on the type of connection
[NetData] = connection at the end DO NOT HAVE LINE. And fortunately usually used to add other payload such as Host: bug.com, Connection: Kee-Alive, etc.
For example, if using SSH = CONNECT ipssh: portssh HTTP/1.0
And if it was followed by the BUG then = CONNECT ipssh:portssh HTTP/1.0[crlf]Host: bug.com [crlf][crlf]
Depending on the type of connection.
Method Inject divided into 3 types:
– Normal
– Front Inject
– Back Inject
– Front Query
– Back Query
The contents of the request to be sent
– Normal
Which means that the connection is placed at the beginning and then followed by the bug payload with 1 LINE [crlf]
Example 1 = [netData][crlf]Host: bug.com[crlf][crlf]
OR
Example 2 = CONNECT ipssh:portssh HTTP/1.0[crlf] Host: bug.com[crlf][crlf]
Green = SSH connections consist of METHOD ip and port with protocol version HTTP / 1.0
Line = [crlf]
Red = Bug
– Front Inject front means
So the bug is placed in front of the next follow connection (ssh / vpn / direct it depends)
Example 1 = GET http://bug.com/ HTTP/1.1[crlf]Host: bug.com[crlf][crlf][realData]
OR
Example 2 = GET http://bug.com/ HTTP/1.1[crlf]Host: bug.com[crlf][crlf]CONNECT ipssh: portssh HTTP/1.0[crlf][crlf]
Method = GET
Red = Bug
Protocol version = HTTP/1.1
Line = [crlf]
Blue = connection
– Back meaning behind
So the first connection (ssh / vpn / direct dependent) then follow bug
Example 1 = [realData]GET http://bug.com/ HTTP/1.1[crlf]Host: bug.com[crlf][crlf]
OR
Example 2 = CONNECT ipssh:portssh HTTP/1.0[crlf][crlf]GET http://bug.com/ HTTP/1.1[crlf]Host: bug.com[crlf][crlf]
Blue = connection
Method = GET
Red = Bug
Protocol version = HTTP/1.1
Line = [crlf]
– Front Query
This means that there are bugs that slipped in front of the connection later in the end @
Example = CONNECT query.com@ipssh:portssh HTTP/1.0[crlf][crlf]GET http://bug.com/HTTP/1.1[crlf]Host: bug.com[crlf][crlf]
Blue = connection
Black = Query
Method = GET
Red = Bug
Protocol version = HTTP/1.1
Line = [crlf]
Query usually the same as the bug itself
– Back Query
This means that there Bug tucked behind a connection that begins as:
Example = CONNECT ipssh:portssh@query.com HTTP/1.0[crlf][crlf]GET http://bug.com/HTTP/1.1[crlf]Host: bug.com[crlf][crlf]
Blue = connection
Black = Query
Method = GET
Red = Bug
Protocol version = HTTP/1.1
Line = [crlf]
Query usually the same as the bug itself
Replace
Replace is replacing a specific response in order to connect the bias current. And most often, replacing to 200 OK
Example Response =
– 302 to 200 OK Replace Found
– 400 Bad Request Replace to 200 OK
– Etc
Payload
There are many types of payloads. In all the cases the payload is not needed. But since the present day networks have tight security; payload is compulsory.
example:
– Host: bug.com
– X-Online-Host: bug.com
– X-Forward-Host: bug.com
– X-Forwarded-For: bug.com
– Connection: Keep-Alive or Close
– Proxy-Connection: Keep-Alive or Close
– Content-Type: * / *
– Content-Length: 0 or 1024 or another one
– And many more
Proxy and Port
The proxy and proxy port of the original operator could be used.
Public Proxy or Squid Proxy from VPS with port 80/8000/8080/3128 / etc mouthful can be invite the free internet.
