Skip to content

Commit fa22990

Browse files
authored
Merge pull request #246 from AikidoSec/fix-bypass-ssrf-redirect
Fix SSRF test to use port 3000
2 parents ec55d4a + fb19b6f commit fa22990

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

tests/cli/ssrf/test_ssrf_curl_exec_redirect.phpt

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@ AIKIDO_LOG_LEVEL=INFO
66
AIKIDO_BLOCK=1
77

88
--POST--
9-
test=http://ssrf-redirects.testssandbox.com/ssrf-test
9+
test=https://ssrf-redirects.testssandbox.com/ssrf-test-3
1010

1111
--FILE--
1212
<?php
1313

14-
$host = '0.0.0.0';
15-
$port = 80;
14+
$host = '127.0.0.1';
15+
$port = 3000;
1616
$pid = null;
1717

1818
$descriptorspec = [
@@ -35,7 +35,7 @@ try {
3535
sleep(1);
3636

3737
// Perform the cURL request
38-
$ch1 = curl_init("http://ssrf-redirects.testssandbox.com/ssrf-test");
38+
$ch1 = curl_init("https://ssrf-redirects.testssandbox.com/ssrf-test-3");
3939
curl_setopt($ch1, CURLOPT_RETURNTRANSFER, true);
4040
curl_setopt($ch1, CURLOPT_FOLLOWLOCATION, true);
4141
$response = curl_exec($ch1);

0 commit comments

Comments
 (0)