GET requests for other sites
For kicks today, I was crawling through access_logs for the main IP for my box. Besides tons of junk like people trying to exploit default.ida, I've seen numerous requests for URLs like "http://www.yahoo.com" or "GET http://www.intel.com/ HTTP/1.1"I pulled up a telnet session on port 80 and tried this (they were getting 200s, not 404s), and I just get served / on my site. I'm just wondering what's going on -- is there some exploit that's being tested for? Do some webservers go out and grab the page?
And what is a SEARCH request? I didn't know HTTP had such a thing. (In fact, it seems that it doesn't?)