-4

Is there some online forwarding service that I can give HTTP GET parameters to, and it would create a form with the parameters and submit it as POST?

For example, I'd like to give someone the URL:

http://imaginaryservice.com/http://reddit.com/post/login?username=guy&password=fawkes

...and when they click it, it should do the equivalent of submitting those parameters in POST to that URL (though the referer header would obviously reveal the trick).

Anyway, I know how I'd build one, but if something like that already exists, I'd like to know.

6
  • 1
    Hi @itsadok, welcome to Information Security! Though I must say, that I don't see the security aspects of this question? If you do think it is a security question, please edit it to clarify the points you'd like to emphasize.
    – AviD
    Aug 11 '11 at 11:03
  • @AviD It seemed to me that it would be a simple tool to check a site for that particular XSRF vulnerability. I figured that the people here would know about such a service.
    – itsadok
    Aug 11 '11 at 11:11
  • 2
    If you want to use this as a security tool, you should add that as context. That said, I'm not sure you're going about this the right way....
    – AviD
    Aug 11 '11 at 11:23
  • This strikes me as a blackhat kind of question. I expect that these sites can be used to facilitate some kinds of attacks on websites, and to conceal your identity when attacking a website. But what is the positive purpose for this? If this is a blackhat question, it does not belong here.
    – D.W.
    Aug 11 '11 at 19:57
  • 2
    off-topic because... Questions seeking product recommendations are off-topic as they become obsolete quickly. Instead, describe your situation and the specific problem you're trying to solve.
    – e-sushi
    Aug 3 '13 at 15:33
3

Yes there is.

http://tomengineering.tripod.com/gettopost.html

1
  • 4
    Hi @Schisis, thanks for this link! Can you please add a bit more info to the answer, explaining what the link is?
    – AviD
    Aug 12 '11 at 11:46
2

There aren't any online services that I'm aware of that (intentionally) allow this type of behavior. If this is something you think you'll do on a regular basis, I highly recommend you look at Web Scarab or Pinata

Not the answer you're looking for? Browse other questions tagged or ask your own question.