https://github.com/techgaun/http-gzip-time

Quick bash PoC implementation of https://github.com/jcarlosn/gzip-http-time
https://github.com/techgaun/http-gzip-time

Last synced: about 1 year ago
JSON representation

Quick bash PoC implementation of https://github.com/jcarlosn/gzip-http-time

• Host: GitHub
• URL: https://github.com/techgaun/http-gzip-time
• Owner: techgaun
• Created: 2016-02-23T04:46:35.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2016-02-23T04:57:44.000Z (over 10 years ago)
• Last Synced: 2025-02-11T21:51:51.545Z (over 1 year ago)
• Language: Shell
• Homepage:
• Size: 1000 Bytes
• Stars: 1
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# http-gzip-time

> Get remote server date and time for vulnerable servers

### Description

[This post](http://jcarlosnorte.com/security/2016/02/21/date-leak-gzip-tor.html) inspired me to write this bash script because I just wanted to spend time doing something fun. As it seems, some of the servers with gzip compression (most likely Windows servers) seem to send the time in server's local timezone as part of [GZip header](http://www.forensicswiki.org/wiki/Gzip#File_header).

### Examples

```shell

$ ./gzip-time http://techgaun.com

The server does not seem to have gzip compression enabled.

$ ./gzip-time http://reddit.com

Note: This server might be sending time in UTC instead of local time.

The server date time is: 2016-02-23 04:50:49

The UTC time is: 2016-02-23 04:50:49

$ ./gzip-time http://bing.com

The server date time is: 2016-02-22 20:50:56

The UTC time is: 2016-02-23 04:50:56

```