tarunkant / Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
MIT License
2.83k stars 369 forks source link

curl gopher null byte support #23

Open tsybot opened 2 months ago

tsybot commented 2 months ago

Curl gopher:// can send NULL byte only in 7.45.0 >= 7.71.0 versions Commit start support null byte Commit end support null byte

So, all payload who have NULL bytes inside works only in this versions, and of you try use curl extension in php you are limited to the same versions of the library that php should be compiled with. You can update README this it information. Curl developer no have plans to support NULL byte in gopher:// in future.