mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
28 lines
591 B
Python
28 lines
591 B
Python
#!/usr/bin/env python
|
||
# -*- coding: UTF-8 -*-
|
||
"""
|
||
@Desc ：ip address spoofing
|
||
"""
|
||
from flask import Flask
|
||
from flask import request
|
||
|
||
app = Flask(__name__)
|
||
|
||
@app.route('/bad1')
|
||
def bad1():
|
||
client_ip = request.headers.get('x-forwarded-for')
|
||
if not client_ip.startswith('192.168.'):
|
||
raise Exception('ip illegal')
|
||
return 'bad1'
|
||
|
||
@app.route('/bad2')
|
||
def bad2():
|
||
client_ip = request.headers.get('x-forwarded-for')
|
||
if not client_ip == '127.0.0.1':
|
||
raise Exception('ip illegal')
|
||
return 'bad2'
|
||
|
||
if __name__ == '__main__':
|
||
app.debug = True
|
||
app.run()
|