BUUCTF WEB [De1CTF 2019]SSRF Me

最新推荐文章于 2025-03-28 13:15:09 发布

A_dmins

最新推荐文章于 2025-03-28 13:15:09 发布

阅读量3.7k

点赞数 4

分类专栏： CTF题 BUUCTF

本文链接：https://blog.youkuaiyun.com/qq_42967398/article/details/103549258

版权

BUUCTF WEB [De1CTF 2019]SSRF Me

不得不说buuctf是个好网站，很多比赛的题目都有复现！！
题目给了源码：

#! /usr/bin/env python
#encoding=utf-8
from flask import Flask
from flask import request
import socket
import hashlib
import urllib
import sys
import os
import json
reload(sys)
sys.setdefaultencoding('latin1')

app = Flask(__name__)

secert_key = os.urandom(16)


class Task:
    def __init__(self, action, param, sign, ip):
        self.action = action
        self.param = param
        self.sign = sign
        self.sandbox = md5(ip)
        if(not os.path.exists(self.sandbox)):          #SandBox For Remote_Addr
            os.mkdir(self.sandbox)

    def Exec(self):
        result = {
   }
        result['code'] = 500
        if (self.checkSign()):
            if "scan" in self.action:
                tmpfile = open("./%s/result.txt" % self.sandbox, 'w')