{'context_id': 397, 'vulnerable': True, 'processing': False, 'request': {'url': 'https://harris-roberts.biz/tag/blog/mainabout.htm', 'method': 'POST', 'headers': {'HOST': '127.0.0.1:5000', 'USER_AGENT': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0', 'ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'ACCEPT_LANGUAGE': 'en-US,en;q=0.5', 'ACCEPT_ENCODING': 'gzip, deflate, br, zstd', 'CONNECTION': 'keep-alive', 'REFERER': 'http://127.0.0.1:5000/path-traversal', 'COOKIE': 'csrftoken=7GgBqVlBL6WuGdfu3e6EBXep8N5vFiVm; grafana_session=54c841e9cb2f4956a7c791efd284d120; grafana_session_expiry=1735995560; user_id=2; session_token=b3c634c91e1711c794704a031918a34b', 'UPGRADE_INSECURE_REQUESTS': '1', 'SEC_FETCH_DEST': 'document', 'SEC_FETCH_MODE': 'navigate', 'SEC_FETCH_SITE': 'same-origin', 'SEC_FETCH_USER': '?1', 'PRIORITY': 'u=0, i', 'Content-Type': 'application/x-www-form-urlencoded', 'User-Agent': 'Mozilla/5.0 (compatible; MSIE 8.0; Windows 98; Win 9x 4.90; Trident/4.1)'}, 'body': b'csrfmiddlewaretoken=5826982b-2aa0-46fd-8410-a50b4a7ee4d6&newpass1=E1SP7OeG&newpass2=BRejuyaU'}, 'control_flow': {0: "api_key = request.cookies.get('api_key')", 1: 'if API_KEY is None or api_key == API_KEY:', 2: 'return f(*args, **kwargs)', 3: 'pass', 4: "if request.method == 'GET':", 5: 'return ssrf_page(request, app)', 6: 'return render_template(', 7: "'ssrf.html'", 8: 'return render_template(', 9: '{% extends "base.html" %}', 10: '{% block content %}', 11: '', 12: '<h1 class="title">SSRF</h1>', 13: '<div class="block">', 14: '{% endblock %}', 15: '{% endblock %}', 16: '', 17: '', 18: '<div class="block">', 19: '<input class="input" type="email" name="email" id="email" placeholder="E-mail" required>', 20: '<input class="input" type="url" name="imageUrl" id="imageUrl" placeholder="Profile Picture Url" required>', 21: '<input class="button" type="submit" value="Send">', 22: '</form>', 23: '<input class="button" type="submit" value="Send">', 24: '</form>', 25: '<input class="button" type="submit" value="Send">', 26: '</div>', 27: '<meta name="viewport" content="width=device-width, initial-scale=1.0">', 28: '<link rel="stylesheet" href="{{ url_for(\'static\', filename=\'assets/bulma.min.css\') }}">', 29: '<title>Vuln Python App</title>', 30: '<body>', 31: '{% include "./components/navbar.html" %}', 32: '<section class="section">', 33: '{% block content %}{% endblock %}', 34: '</div>', 35: '</section>', 36: '', 37: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 38: '', 39: '<a role="button" class="navbar-burger" aria-label="menu" aria-expanded="False" data-target="navbarBasicExample">', 40: '<span aria-hidden="True"></span>', 41: '<span aria-hidden="True"></span>', 42: '</div> -->', 43: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 44: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 45: '', 46: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 47: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 48: '<div id="navbarBasicExample" class="navbar-menu">', 49: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 50: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 51: '<div class="navbar-start">', 52: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 53: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 54: '<a class="navbar-item" href="{{ url_for(\'home\') }}">', 55: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 56: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 57: 'Home', 58: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 59: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 60: '</a>', 61: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 62: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 63: '', 64: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 65: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 66: '<div class="navbar-item has-dropdown is-hoverable">', 67: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 68: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 69: '<a class="navbar-link">', 70: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 71: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 72: 'SQL Injection', 73: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 74: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 75: '</a>', 76: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 77: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 78: '', 79: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 80: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 81: '<div class="navbar-dropdown">', 82: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 83: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 84: '<a class="navbar-item" href="{{ url_for(\'sql_injection_login\') }}">', 85: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 86: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 87: 'Login', 88: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 89: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 90: '</a>', 91: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 92: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 93: '<a class="navbar-item" href="{{ url_for(\'sql_injection_search\') }}?q=">', 94: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 95: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 96: 'Search', 97: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 98: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 99: '</a>', 100: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 101: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 102: '</div>', 103: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 104: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 105: '<script>', 106: "// var googleCaptchaKey = '6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI';", 107: '<pre>', 108: 'Email: {{ email }}', 109: 'Name: {{ name }}', 110: 'Local URL: {{ profile_picture_url }}', 111: '</pre>', 112: '</div>', 113: '', 114: '<div class="block">', 115: '</div>', 116: '', 117: '</section>', 118: '{% endblock %}', 119: '{% endblock %}', 120: '{% endblock %}', 121: '{% endblock %}', 122: '{% endblock %}', 123: '{% endblock %}', 124: '{% endblock %}', 125: '{% endblock %}', 126: "// var googleCatpchaSecretKey = '6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe';", 127: '', 128: "var googleCaptchaKey = '{{ GOOGLE_RECAPTCHA_SITE_KEY }}';", 129: "var googleCatpchaSecretKey = '{{ GOOGLE_RECAPTCHA_SECRET_KEY }}';", 130: '', 131: '</script>', 132: '', 133: '{% block js %}{% endblock %}', 134: '</body>', 135: '</html>', 136: 'None', 137: 'None', 138: 'None', 139: 'None', 140: 'None', 141: '</html>'}, 'response': {'status_code': '200', 'headers': {'Content-Type': 'text/html; charset=utf-8', 'Content-Length': '3793'}}}