Weird response from my server with telnet

***skiddieleet*** · September 19th, 2004, 08:50 PM

I was having some issues with my connection, and was messing around with telnet and I telnetted to my webserver and made a pretty standard request.
GET / HTTP/1.1
host: skiddieleet.org

and this is what it spits out

HTTP/1.1 200 OK
Date: Sun, 19 Sep 2004 16:03:53 GMT
Server: Apache/2.0.61 (Unix) PHP/5.0.3
X-Powered-By: PHP/5.0.3
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Set-Cookie: PHPSESSID=b7f9948e67555bade3e9c8d609bc92bd; path=/
Set-Cookie: hits=true; expires=Sun, 19-Sep-2004 16:34:04 GMT
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-1

41
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN">
<html>
<head>

3b
<title>skiddieleet.org</title>
<style type="text/css">

2c
table {
background-color: #666666;
}

29
td {
background-color: #333333;
}

29
th {
background-color: #993300;
}

6f
body {
color: #FFFFFF;
font-family: sans-serif;

font-size: small;
background-color: #00000
0;
}

36
a:link { color: #FFFFFF; text-decoration: underline; }
3b

a:active { color: #FFFFFF; text-decoration: underline; }
3c

a:visited { color: #FFFFFF; text-decoration: underline; }
40

a:hover { color: #FFFFFF; text-decoration: none; }
</style>

8
</head>

7
<body>

44
<br />
<img src="./images/sk.gif" alt="We put the skiddie in leet">

5e
<table style='background-color: #000000; width: 100%;'>
<tr>
<td vali
gn="top" style='width:
2a
20%; background-color: #000000;'>
<br />

50
<table style='width: 200px;'>
<tr>
<th align="center">Navigation</t
h>
</tr>

46
<tr>
<td align="center"><a href="./index.php">Home</a></td>

</tr>

4d
<tr>
<td align="center"><a href="./projects.php">Projects</a>
</td>
</tr>

45
<tr>
<td align="center"><a href="./chat.php">Chat</a></td>

</tr>

47
<tr>
<td align="center"><a href="./forum.php">Forum</a></td>

</tr>

5c
<tr>
<td align="center"><a href="./index.php?action=viewmembe
rs">Members</a></td>
</tr>

47
<tr>
<td align="center"><a href="./login.php">Login</a></td>

</tr>

4d
<tr>
<td align="center"><a href="./register.php">Register</a>
</td>
</tr>

5b
</table>
<br />
<table style='width: 200px;'>
<tr>
<th align="cente
r">Links</th>
</tr>

79
<tr>
<td align="center"><a href="http://shell.alternate-heave
n.com/" target="_blank">Alternate-Heaven</a></td>
</tr>

63
<tr>
<td align="center"><a href="http://www.n3kr00.com/" targ
et="_blank">n3kR00</a></td>
</tr>

6b
<tr>
<td align="center"><a href="http://www.antionline.com/"
target="_blank">AntiOnline</a></td>
</tr>

63
<tr>
<td align="center"><a href="http://www.google.com/" targ
et="_blank">Google</a></td>
</tr>

71
</table>
<br />
</td>
<td valign="top" align="center" style='b
ackground-color: #000000; width: 80%;'>
<br />

3a
<table style='width: 400px;' cellpadding="2">
<tr>
<th
1c
valign="top" align="center">
35
skiddieleet.org</th>
</tr>

6b
<tr>
<td valign="top">First of all I wo
uld like to thank Lisa and baka for
72
getting me this domain. Thank you very much

. I know there isn't much here y
et, but there will be hopefully.
7e
I just finished a private messaging system for the site and I hope that it is fu
nctional (it seemed to be when I tested it).
77
For the future I plan on adding forums and maybe even photo albums for users. I
am open to suggestions for the site.
95
If you have any you can PM me <a href="./private.php?action=new&getto=skiddielee
t">here</a> or <a href="mailto:[email protected]">email</a> me.
50
Thank you for visiting skiddieleet.org and come back soon.</td>
</tr>
</table>

18
</td>
</tr>
</table>

92
<br /><br />
<div align="center"><font size="2" color="#333333">connecting from:
192.168.0.101</font><br />
<img src="./images/hits.jpg">
</div>

8
</body>

8
</html>

0

The thing that caught my eye as strange was all those numbers just stuck within the code. I looked in a browser and they don't show up in view source. I host other site, and some of the pages do this and some don't. Has anyone seen this or heard of this before, and if so do you have any clue what is going on and if it's something to worry about? It almost seems as though it's spitting out hex numbers bettween every few lines of code. Any insight into what is going on would be greatly appreciated. Thank you very much. Peace.

**Donkey Punch** · September 19th, 2004, 11:14 PM

could it be your client?

***skiddieleet*** · September 19th, 2004, 11:18 PM

I guess it could be, but it only does it for certain pages. for instance, one of the sites I host has an index.html and that didn't do it. Then I went to show.php with no get variables sent, and it didn't do it. Last I went to show.php with a bunch of get variables that it accepts and it did it. So I don't know what is going on. Thanks for the reply hun. Might be what it is, but I've never seen it before so I figure it's not the client but my site doing something strange perhaps because of the client.

***Spyder32*** · September 19th, 2004, 11:31 PM

h3r3tic: Which client are you using? I know trying puTTy didn't work for me and I'm just wondering what are you using to try to connect?

***skiddieleet*** · September 19th, 2004, 11:37 PM

I was using hte telnet client that comes with windows XP pro. It really sucks

. You can't see what you type, and if you make a mistake and backspace it doesn't work. So you have to be precise in your typing.
/me downloads another client.
and maybe since it wasn't doing it for you it is just the windows client. I guess it's really nothing to worry about, but I want to be sure. Thanks.

***Spyder32*** · September 19th, 2004, 11:41 PM

Ahh, I see. Yeah I heard XP's telnet client blew loads. I like the previous Windows version's telnet client. A little better (IMO) than the XP one. My personal preference is puTTy which I recommend you download as well. Nice GUI and work's very well. You can set your settings and preferences in it aswell and that's something I like to be able to do.

***skiddieleet*** · September 20th, 2004, 12:15 AM

I modified the script posted here to just send the request I sent, and redirected it to a file and got the same thing with the numbers in the output. I also tried on linux telnet and got the same. When I tried with putty I couldn't get it to accept my request. It kept saying bad request. So everything I've tried it with has had the numbers so far, including another program I had in java to get a response from a server and output it to a file.
/me shrugs
Does this pose any security risk? To me it's almost like it's leaking something. since it seems to be outputting hex maybe some broken up memory addresses?
/me shrugs
Whatever it is I don't like it. I hope it's nothing to worry about though. Thanks Spyder32 and Donkey Punch.

edit
I just noticed I shrug a lot. Is that bad for your shoulders?
oh, and I also noticed I forgot the link to the script I modded :P.

***Spyder32*** · September 20th, 2004, 01:21 AM

Bleh, puTTY didn't work for me either so don't feel left out

I don't think this is something you need to really be concerned with anyways.

And yes, you have the most active shoulders on AO

Thread: Weird response from my server with telnet

Thread Tools

Display

Weird response from my server with telnet

Posting Permissions