请求头与响应头：字段速查与 MIME

python3 -c '
from http.server import BaseHTTPRequestHandler, HTTPServer
 
class Echo(BaseHTTPRequestHandler):
    def do_GET(self):
        lines = ["我收到的请求头:"]
        for k, v in self.headers.items():
            lines.append("  " + k + ": " + v)
        body = ("\n".join(lines) + "\n").encode()
        self.send_response(200)
        self.send_header("Content-Type", "text/plain; charset=utf-8")
        self.send_header("Content-Length", str(len(body)))
        self.end_headers()
        self.wfile.write(body)
    def log_message(self, *a):
        pass
 
HTTPServer(("127.0.0.1", 8000), Echo).serve_forever()
' &
for _i in $(seq 1 50); do (exec 3<>/dev/tcp/127.0.0.1/8000) 2>/dev/null && break; sleep 0.1; done
 
echo "===== 模拟浏览器请求 ====="
curl -s http://127.0.0.1:8000/page \
  -H "User-Agent: Mozilla/5.0 (Macintosh)" \
  -H "Accept: text/html,application/xhtml+xml" \
  -H "Accept-Language: zh-CN,zh;q=0.9" \
  -H "Referer: http://127.0.0.1:8000/home"
 
echo "===== 模拟伪造 X-Forwarded-For ====="
curl -s http://127.0.0.1:8000/api -H "X-Forwarded-For: 8.8.8.8"

python3 -c '
from http.server import BaseHTTPRequestHandler, HTTPServer
 
PAYLOAD = b"<h1>hello</h1><script>alert(1)</script>"
 
TYPES = {
    "/as-html":  "text/html; charset=utf-8",
    "/as-text":  "text/plain; charset=utf-8",
    "/as-bin":   "application/octet-stream",
}
 
class H(BaseHTTPRequestHandler):
    def do_GET(self):
        ctype = TYPES.get(self.path, "text/plain")
        self.send_response(200)
        self.send_header("Content-Type", ctype)
        self.send_header("Content-Length", str(len(PAYLOAD)))
        self.end_headers()
        self.wfile.write(PAYLOAD)
    def log_message(self, *a):
        pass
 
HTTPServer(("127.0.0.1", 8000), H).serve_forever()
' &
for _i in $(seq 1 50); do (exec 3<>/dev/tcp/127.0.0.1/8000) 2>/dev/null && break; sleep 0.1; done
 
for p in /as-html /as-text /as-bin; do
  echo "== $p =="
  curl -si http://127.0.0.1:8000$p | grep -i "content-type"
done

python3 -c '
from http.server import BaseHTTPRequestHandler, HTTPServer
 
class Echo(BaseHTTPRequestHandler):
    def do_POST(self):
        n = int(self.headers.get("Content-Length", 0))
        raw = self.rfile.read(n)
        out = ("Content-Type: " + str(self.headers.get("Content-Type")) +
               "\n体的前 200 字节:\n" + raw[:200].decode(errors="replace") + "\n\n")
        body = out.encode()
        self.send_response(200)
        self.send_header("Content-Length", str(len(body)))
        self.end_headers()
        self.wfile.write(body)
    def log_message(self, *a):
        pass
 
HTTPServer(("127.0.0.1", 8000), Echo).serve_forever()
' &
for _i in $(seq 1 50); do (exec 3<>/dev/tcp/127.0.0.1/8000) 2>/dev/null && break; sleep 0.1; done
 
echo "1) 默认 -d：application/x-www-form-urlencoded"
curl -s http://127.0.0.1:8000/ -d "name=Ada&city=beijing"
 
echo "2) JSON：需要手动声明 Content-Type"
curl -s http://127.0.0.1:8000/ -H "Content-Type: application/json" -d '{"name":"Ada"}'
 
echo "3) multipart/form-data：-F 参数，注意 boundary"
echo "file-content-here" > up.txt
curl -s http://127.0.0.1:8000/ -F "name=Ada" -F "avatar=@up.txt"