Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is there some online forwarding service that I can give HTTP GET parameters to, and it would create a form with the parameters and submit it as POST?

For example, I'd like to give someone the URL:

http://imaginaryservice.com/http://reddit.com/post/login?username=guy&password=fawkes

... and when they click it, it should do the equivalent of submitting those parameters in POST to that URL (though the referer header would obviously reveal the trick).

Anyway, I know how I'd build one, but if something like that already exists, I'd like to know.

share|improve this question

closed as off-topic by Xander, Terry Chia, Adnan, TildalWave, NULLZ Aug 3 '13 at 23:05

This question appears to be off-topic. The users who voted to close gave these specific reasons:

If this question can be reworded to fit the rules in the help center, please edit the question.

1  
Hi @itsadok, welcome to Information Security! Though I must say, that I don't see the security aspects of this question? If you do think it is a security question, please edit it to clarify the points you'd like to emphasize. –  AviD Aug 11 '11 at 11:03
    
@AviD It seemed to me that it would be a simple tool to check a site for that particular XSRF vulnerability. I figured that the people here would know about such a service. –  itsadok Aug 11 '11 at 11:11
2  
If you want to use this as a security tool, you should add that as context. That said, I'm not sure you're going about this the right way.... –  AviD Aug 11 '11 at 11:23
    
This strikes me as a blackhat kind of question. I expect that these sites can be used to facilitate some kinds of attacks on websites, and to conceal your identity when attacking a website. But what is the positive purpose for this? If this is a blackhat question, it does not belong here. –  D.W. Aug 11 '11 at 19:57
1  
off-topic because... Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve. –  e-sushi Aug 3 '13 at 15:33

2 Answers 2

up vote 3 down vote accepted

Yes there is.

http://tomengineering.tripod.com/gettopost.html

share|improve this answer
3  
Hi @Schisis, thanks for this link! Can you please add a bit more info to the answer, explaining what the link is? –  AviD Aug 12 '11 at 11:46

There aren't any online services that I'm aware of that (intentionally) allow this type of behavior. If this is something you think you'll do on a regular basis, I highly recommend you look at Web Scarab or Pinata

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.