当前位置：网站首页>ctfshow-web355,356(SSRF)

ctfshow-web355,356(SSRF)

2022-07-01 07:06:00 【m0_ sixty-two million ninety-four thousand eight hundred and fo】

web-355 

<?php
error_reporting(0);
highlight_file(__FILE__);
$url=$_POST['url'];
$x=parse_url($url);
if($x['scheme']==='http'||$x['scheme']==='https'){
$host=$x['host'];
if((strlen($host)<=5)){
$ch=curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result=curl_exec($ch);
curl_close($ch);
echo ($result);
}
else{
    die('hacker');
}
}
else{
    die('hacker');
}
?>

host The length is less than 5, namely 127.0.0.1 To be less than 5, It can be written. 127.1 or 0 

web-356

<?php
error_reporting(0);
highlight_file(__FILE__);
$url=$_POST['url'];
$x=parse_url($url);
if($x['scheme']==='http'||$x['scheme']==='https'){
$host=$x['host'];
if((strlen($host)<=3)){
$ch=curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result=curl_exec($ch);
curl_close($ch);
echo ($result);
}
else{
    die('hacker');
}
}
else{
    die('hacker');
}
?>
url=http://0/flag.php

 

原网站

版权声明
本文为[m0_ sixty-two million ninety-four thousand eight hundred and fo]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/182/202207010647493860.html

边栏推荐

猜你喜欢

随机推荐