当有时候ssrf没有回显的时候,测试该漏洞是否可以利用gopher协议的时候比较麻烦,那么就可以在vps上起一个gopher协议的服务端来测试。
先安装几个库1
2pip3 install flask
pip3 install flask_gopher
代码如下:1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16from flask import Flask, url_for
from flask_gopher import GopherExtension, GopherRequestHandler
from itertools import zip_longest
app = Flask(__name__)
gopher = GopherExtension(app)
@app.route('/')
def index():
return gopher.render_menu(
gopher.menu.title('My GopherHole'),
gopher.menu.submenu('Home', url_for('index')),
gopher.menu.info("Look Ma, it's a gopher server!"))
if __name__ == '__main__':
app.run('0.0.0.0', 70, request_handler=GopherRequestHandler)
测试