Hi moshi, thanks for viewing my story. Judging from the source code (https://github.com/9oelM/elasticpwn/blob/main/core/util/http.go#L53), it should be duly possible. Also, even if you prepend http:// for all urls, elasticpwn should be smart enough to figure out which ones should be https by looking at the error from the server, and send a request with https again (supposedly if there's no bug). So yeah, the answer is yes. You can make the list like this and it should handle things properly:

Your Elasticsearch and Kibana instances are open, and that’s a real problem I have been doing some serious research on the public exposure of Elasticsearch and Kibana instances recently, and here are a few of the reports I made, found to be valid. I’ve been enjoying it so much:

This is a full guide to setup, develop and deploy a backend app with a recently released container image feature for lambda on AWS. Needless to say, if you are a great fan of Docker, you would know how amazing it is. …

Disclaimer: We will focus on useSelector itself in this article, rather than third-party libraries like reselect, because it's out of the scope of the article. How was it like before? Now, before talking about useSelector, we need to know some background. Let's go back to pre-function component era, where all we needed to care about…

Yes, Chrome’s performance tab is overwhelming First time you look into all the charts, you have no idea what means what. What do those different colors even mean? It’s not self-explanatory at all. There needs to be a guidebook. In this article, I will briefly walk you through all functionalities of Chrome’s performance tab, with majority…

I was struggling at my company trying to write some tests for redux-observable operations. Most of the network requests were managed by RxJS, and none of them were covered by tests. I wanted to write tests but just did not know how to. But I really just wanted to start…

Oddities with how forEach works in JavaScript — The first encounter with the problem. I was coding as usual. And I faced an odd encounter with how forEach works. Here goes the code to give an example of that. Imagine the code below is the code from one of the libraries I was using: And I spotted the code in my company’s app…