GCAA custom feed #30

New Issue

lucidiot · 2020-08-05T07:43:50Z

lucidiot commented

2020-08-05 07:43:50 +00:00

United Arab Emirates' General Civil Aviation Authority.

Getting the full list of final reports is going to be pretty complex: the amount of data sent by a POST request with all the filters is huge enough to cause issues in my terminal. To see it, open your browser's developer tools, apply the Final report status filter and click Search, then a 100 page size and click Apply. This will trigger two rather slow POST requests with all the fields. I am pretty sure you could do a DDoS attack on this website just by clicking a lot on these buttons…

https://www.gcaa.gov.ae/en/departments/airaccidentinvestigation/pages/investigationreport.aspx

United Arab Emirates' General Civil Aviation Authority. Getting the full list of final reports is going to be pretty complex: the amount of data sent by a POST request with all the filters is huge enough to cause issues in my terminal. To see it, open your browser's developer tools, apply the `Final` report status filter and click Search, then a `100` page size and click `Apply`. This will trigger two rather slow POST requests with all the fields. I am pretty sure you could do a DDoS attack on this website just by clicking a lot on these buttons… https://www.gcaa.gov.ae/en/departments/airaccidentinvestigation/pages/investigationreport.aspx

lucidiot added the

feed

label 2020-08-05 07:43:50 +00:00

lucidiot commented

2020-08-08 17:59:17 +00:00

Including the long __EVENTVALIDATION field caused 500 errors to be returned as some strange |-separated text. It seems a piece of JavaScript code splits by | then takes the HTML field and pastes it into the page. It also seems the fields that start with __ are the most important, including __VIEWSTATE which is the worst field of them all.

I might just need to make an initial request just to get the form fields and build the actual POST request…

Including the long `__EVENTVALIDATION` field caused 500 errors to be returned as some strange `|`-separated text. It seems a piece of JavaScript code splits by `|` then takes the HTML field and pastes it into the page. It also seems the fields that start with `__` are the most important, including `__VIEWSTATE` which is the worst field of them all. I might just need to make an initial request just to get the form fields and build the actual POST request…

Sign in to join this conversation.