So basically someone is running a script iterates over the whole ipv4 range and calls the claim endpoint with each single adress in the X-Forwared-For http header once.
viraptor · 18m ago
The line just under that prevents public IPs from using that function.
3r7j6qzi9jvnve · 2h ago
That only works if the proxy is sitting on localhost or a local network, just setting the header shouldn't work.
(I came here because I was curious how jart got 127 and 10, but after seeing the source is their's that's less of wonder..)
I spent an hour playing it! It is quite good.
Is there a source code available for this game?
Edit: looks like thats it: https://github.com/jart/cosmopolitan/blob/master/net/turfwar...
So basically someone is running a script iterates over the whole ipv4 range and calls the claim endpoint with each single adress in the X-Forwared-For http header once.
(I came here because I was curious how jart got 127 and 10, but after seeing the source is their's that's less of wonder..)
the code doesn't consider 127.0.0.0/8 as "private". I'm curious about 10.0.0.0/8 though.*
With UDP you can send whatever, but obviously you won't be able to receive the response.