FIX Blind SSRF with proxy param or url param

PortSwigger · Jul 28, 2023 · 4e1ba7d · 4e1ba7d
1 parent 79a1e0d
commit 4e1ba7d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/other/Blind-SSRF-By-Collaborator.bcheck b/other/Blind-SSRF-By-Collaborator.bcheck
@@ -4,14 +4,14 @@ metadata:
     description: "Blind SSRF with proxy param or url param"
     author: "[email protected]"
 
-
 define:
     proxy_ssrf = `http://{generate_collaborator_address()}/proxy`
     url_ssrf = `https://{generate_collaborator_address()}/url`
+
 given request then
     send request:
         appending queries:
-				  `proxy={proxy_ssrf}`,
+	  `proxy={proxy_ssrf}`,
           `url={url_ssrf}`
     if http interactions then
         report issue: