0

I'm learning SSRF. I learnt that typing "&x=" kinda turn off the rest of an URL (like https://some.website.com/user?id=9&x=.website.com/api/item?id=9)

Everything that comes after the "&x=" part gets ignored. Why is that? Or, if it's not really ignored, then what happens?

Improve this question
New contributor
Ezau is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
1
  • "&" is just to include additional query parameters. Once the "?" is hit, the rest of the URL will be processed as GET key/value pairs.
    – pcalkins
    Aug 4 at 18:11

1 Answer 1

Reset to default
0

It's not related to encoding in this case.

According to the RFC 3986 Regular Expression of ^(([^:/?#]+):)?(//([^/?#]*))?([^?#]*)(\?([^#]*))?(#(.*))? does not allow parsing of another ? after a &, which denotes a second and so forth parameter.

Improve this answer

Your Answer

Ezau is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.