Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -3 down vote favorite

Is there some online forwarding service that I can give HTTP GET parameters to, and it would create a form with the parameters and submit it as POST?

For example, I'd like to give someone the URL:

http://imaginaryservice.com/http://reddit.com/post/login?username=guy&password=fawkes

... and when they click it, it should do the equivalent of submitting those parameters in POST to that URL (though the referer header would obviously reveal the trick).

Anyway, I know how I'd build one, but if something like that already exists, I'd like to know.

share|improve this question
1  
Hi @itsadok, welcome to IT Security! Though I must say, that I don't see the security aspects of this question? If you do think it is a security question, please edit it to clarify the points you'd like to emphasize. – AviD♦ Aug 11 '11 at 11:03
@AviD It seemed to me that it would be a simple tool to check a site for that particular XSRF vulnerability. I figured that the people here would know about such a service. – itsadok Aug 11 '11 at 11:11
2  
If you want to use this as a security tool, you should add that as context. That said, I'm not sure you're going about this the right way.... – AviD♦ Aug 11 '11 at 11:23
This strikes me as a blackhat kind of question. I expect that these sites can be used to facilitate some kinds of attacks on websites, and to conceal your identity when attacking a website. But what is the positive purpose for this? If this is a blackhat question, it does not belong here. – D.W. Aug 11 '11 at 19:57
@DW, it didnt sound blackhat to me, though it could of course be misused. Itsadok, it seems that you're looking for a way to test for CSRF, but going about this the wrong way around - could you add some context about what you're actually looking for? It could be you've already thought of a solution (service to translate GET to POST), when there could be a much better solution to your real problem. – AviD♦ Aug 12 '11 at 11:45

2 Answers

up vote 3 down vote accepted

Yes there is.

http://tomengineering.tripod.com/gettopost.html

share|improve this answer
3  
Hi @Schisis, thanks for this link! Can you please add a bit more info to the answer, explaining what the link is? – AviD♦ Aug 12 '11 at 11:46
up vote 2 down vote

There aren't any online services that I'm aware of that (intentionally) allow this type of behavior. If this is something you think you'll do on a regular basis, I highly recommend you look at Web Scarab or Pinata

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.