ISEC3004 SSRF vuln app: Exploit

Setting Up And Running

python3 required

  pip3 install flask
  
  flask run -p 80

Open browser and go to http://localhost/ then select langauge and submit it
Open burp suite and using its proxy catch the post request sent then change the filepath to /etc/passwd
The password file will be returned instead of the language file

Name		Name	Last commit message	Last commit date
Latest commit History 20 Commits
__pycache__		__pycache__
templates		templates
README.md		README.md
app.py		app.py
english.txt		english.txt
sinhala.txt		sinhala.txt
tamil.txt		tamil.txt