#!/bin/sh # Recorded curl commands; rerun verify.py to start fresh fixture servers. # The ports and temporary folders refer to the recorded run and no longer exist. # Server: python3 fixture.py --mode vulnerable --root --port 51194 curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-zip-benign.zip http://127.0.0.1:51194/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-zip-inside-dotdot.zip http://127.0.0.1:51194/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-zip-dotdot.zip http://127.0.0.1:51194/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-zip-absolute.zip http://127.0.0.1:51194/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-tar-benign.tar http://127.0.0.1:51194/upload/tar curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-tar-dotdot.tar http://127.0.0.1:51194/upload/tar curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-tar-absolute.tar http://127.0.0.1:51194/upload/tar curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/vulnerable-tar-symlink.tar http://127.0.0.1:51194/upload/tar # Server: python3 fixture.py --mode fixed --root --port 51203 curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-zip-benign.zip http://127.0.0.1:51203/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-zip-inside-dotdot.zip http://127.0.0.1:51203/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-zip-dotdot.zip http://127.0.0.1:51203/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-zip-absolute.zip http://127.0.0.1:51203/upload/zip curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-tar-benign.tar http://127.0.0.1:51203/upload/tar curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-tar-dotdot.tar http://127.0.0.1:51203/upload/tar curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-tar-absolute.tar http://127.0.0.1:51203/upload/tar curl --noproxy '*' --silent --show-error --include --http1.1 --connect-timeout 1 --max-time 3 --request POST --header 'Content-Type: application/octet-stream' --data-binary @/private/var/folders/bv/1kt12mw94_sbpfvm9xw5lw380000gn/T/zipslip-run-j_xkxnp0/archives/fixed-tar-symlink.tar http://127.0.0.1:51203/upload/tar