-
Notifications
You must be signed in to change notification settings - Fork 340
/
home.php
executable file
·48 lines (39 loc) · 2.04 KB
/
home.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
<div class="thumbnail">
<!--
<img class="img-responsive" src="http://placehold.it/800x300" alt="">
-->
<div class="caption-full">
<h4><a href="#">Server Side Request Forgery (SSRF/XSPA)</a></h4>
<p align="justify">
This vulnerability also known as Cross Site Port Attack, happens when an attacker has the ability to initiate requests from the affected server. An attacker can trick the web server that could probability running behind a firewall to send requests to itself to identify services running on it, or can even send out-bond traffic to other servers.
</p>
<p>Read more about SSRF <br>
<strong><a target="_blank" href="https://docs.google.com/document/d/1v1TkWZtrhzRLy0bYXBcdLUedXGb9njTNIJXa3u9akHM/edit">https://docs.google.com/document/d/1v1TkWZtrhzRLy0bYXBcdLUedXGb9njTNIJXa3u9akHM/edit</a></p></strong>
</div>
</div>
<div class="well">
<div class="col-lg-6">
<p>Enter an image URL from remote server or internet.
<form method='post' action=''>
<div class="form-group">
<label></label>
<input class="form-control" width="50%" placeholder="Enter URL of Image" name="img_url"></input> <br>
<div align="right"> <button class="btn btn-default" type="submit">Submit Button</button></div>
</div>
</form>
<?php
$image = "";
if(isset($_POST['img_url'])){
$remote_content = file_get_contents($_POST['img_url']);
$filename = "../../img/".rand()."img1.jpg";
file_put_contents($filename, $remote_content);
echo $_POST['img_url']."<br>";
$image = "<img src=\"".$filename."\" width=\"100\" height=\"100\" />";
}
echo $image;
?>
</p>
</div>
<hr>
</div>
<?php include_once('../../about.html'); ?>