extract original host ip if forwarded by one or more hosts

Kitsune-Sec · May 7, 2024 · 1a73128 · 1a73128
1 parent 79d22ba
commit 1a73128
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/server/c2/http.go b/server/c2/http.go
@@ -810,7 +810,14 @@ func newHTTPSessionID() string {
 func getRemoteAddr(req *http.Request) string {
 	ipAddress := req.Header.Get("X-Real-Ip")
 	if ipAddress == "" {
-		ipAddress = req.Header.Get("X-Forwarded-For")
+		xForwardedFor := req.Header.Get("X-Forwarded-For")
+		if xForwardedFor != "" {
+			ips := strings.Split(xForwardedFor, ",")
+			if len(ips) > 0 {
+				// Extracts original client ip address
+				ipAddress = strings.TrimSpace(ips[0])
+			}
+		}
 	}
 	if ipAddress == "" {
 		return req.RemoteAddr