update

cujanovic · cujanovic · commit b6e17de59bc8 · 2021-10-04T12:25:45.000+02:00
diff --git a/custom-200/index.php b/custom-200/index.php
@@ -4,6 +4,6 @@
 header("HTTP/1.1 200 OK");
 header("Content-Location: ".$_GET["url"]);
 header("Content-Type:".base64_decode($_GET["content-type"]));
-header("Cache-Control: no-store, no-cache, must-revalidate");
+header("Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private");
 header("Pragma: no-cache");
 echo base64_decode($_GET["body"]);
diff --git a/custom-201/index.php b/custom-201/index.php
@@ -4,6 +4,6 @@
 header("HTTP/1.1 201 Created");
 header("Location: ".$_GET["url"]);
 header("Content-Type:".base64_decode($_GET["content-type"]));
-header("Cache-Control: no-store, no-cache, must-revalidate");
+header("Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private");
 header("Pragma: no-cache");
 echo base64_decode($_GET["body"]);
diff --git a/custom-30x/index.php b/custom-30x/index.php
@@ -4,6 +4,6 @@
 header("HTTP/1.1 ".$_GET["code"]." Found");
 header("Location: ".$_GET["url"]);
 header("Content-Type:".base64_decode($_GET["content-type"]));
-header("Cache-Control: no-store, no-cache, must-revalidate");
+header("Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private");
 header("Pragma: no-cache");
 echo base64_decode($_GET["body"]);
diff --git a/htaccess/csv-with-body-md/.htaccess b/htaccess/csv-with-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).c.csv$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/csv
 Header always set Content-Type text/csv
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/csv-with-body/.htaccess b/htaccess/csv-with-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).c.csv$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/csv
 Header always set Content-Type text/csv
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/csv-without-body-md/.htaccess b/htaccess/csv-without-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).c.csv$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/csv-without-body/.htaccess b/htaccess/csv-without-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).c.csv$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-with-body-md/.htaccess b/htaccess/img-with-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).i.jpg$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header image/jpeg
 Header always set Content-Type image/jpeg
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-with-body/.htaccess b/htaccess/img-with-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).i.jpg$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header image/jpeg
 Header always set Content-Type image/jpeg
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-without-body-md/.htaccess b/htaccess/img-without-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).i.jpg$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/img-without-body/.htaccess b/htaccess/img-without-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).i.jpg$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-with-body-md/.htaccess b/htaccess/json-with-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).j.json$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header application/json
 Header always set Content-Type application/json
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-with-body/.htaccess b/htaccess/json-with-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).j.json$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header application/json
 Header always set Content-Type application/json
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-without-body-md/.htaccess b/htaccess/json-without-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).j.json$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/json-without-body/.htaccess b/htaccess/json-without-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).j.json$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/pdf-with-body-md/.htaccess b/htaccess/pdf-with-body-md/.htaccess
@@ -57,7 +57,7 @@ RewriteRule 308-([^/-]*)-(.*).p.pdf$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header application/pdf
 Header always set Content-Type application/pdf
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/pdf-with-body/.htaccess b/htaccess/pdf-with-body/.htaccess
@@ -57,7 +57,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).p.pdf$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header application/pdf
 Header always set Content-Type application/pdf
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/pdf-without-body-md/.htaccess b/htaccess/pdf-without-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).p.pdf$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/pdf-without-body/.htaccess b/htaccess/pdf-without-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).p.pdf$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-with-body-md/.htaccess b/htaccess/xml-with-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).x.xml$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/xml
 Header always set Content-Type text/xml
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-with-body/.htaccess b/htaccess/xml-with-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).x.xml$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/xml
 Header always set Content-Type text/xml
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-without-body-md/.htaccess b/htaccess/xml-without-body-md/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-(.*).x.xml$ $1://169.254.169.254/$2 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/htaccess/xml-without-body/.htaccess b/htaccess/xml-without-body/.htaccess
@@ -58,7 +58,7 @@ RewriteRule 308-([^/-]*)-([^/-]*)-(.*).x.xml$ $1://$2/$3 [L,R=308,NC]
 
 # Always set the Content-Type header text/html
 Header always set Content-Type text/html
-# Always set Cache-Control to no-cache no-store must-revalidate
-Header always set Cache-Control "no-store, no-cache, must-revalidate"
+# Always set Cache-Control to max-age=0, must-revalidate, no-cache, no-store, private
+Header always set Cache-Control "max-age=0, must-revalidate, no-cache, no-store, private"
 # Always set Pragma to no-cache
 Header always set Pragma no-cache
diff --git a/iframe/index.php b/iframe/index.php
@@ -1,7 +1,7 @@
 <?php
 #http://ssrf.localdomain.pw/iframe/?proto=http&ip=127.0.0.1&port=80&url=/
 header("Content-Type: text/html");
-header("Cache-Control: no-store, no-cache, must-revalidate");
+header("Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private");
 header("Pragma: no-cache");
 
 if (filter_var($_GET["ip"], FILTER_VALIDATE_IP) && filter_var($_GET["port"], FILTER_VALIDATE_INT) && isset($_GET["proto"]) && isset($_GET["url"])){
@@ -14,4 +14,4 @@
     echo '<iframe src="'.$proto.'://'.$_GET["ip"].':'.$_GET["port"].$url.'?@google.com:80/" height="180px" width="80%"></iframe>';
     echo '<iframe src="'.$proto.'://'.$_GET["ip"].':'.$_GET["port"].$url.'#@www.google.com:80/" height="180px" width="80%"></iframe>';
     echo '</body></html>';
-}
+}
diff --git a/ssrf2smtp/index.php b/ssrf2smtp/index.php
@@ -20,5 +20,5 @@
 
 header("HTTP/1.1 ".$_GET["code"]." Found");
 header('Location: '.$_GET["proto"].'://'.$_GET["ip"].':'.$_GET["port"].'/_'.$payload);
-header("Cache-Control: no-store, no-cache, must-revalidate");
+header("Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private");
 header("Pragma: no-cache");
