wireshark capture of poc
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/692/066/460/411/287/original/66e42781919dfaa6.png
@christopherkunz
Yes, my test environments (unpatched Server 2016, 2022, and 2025) all had a maximum DNS suffix of 64 chars. (Longer isn't allowed)
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.