import requests
from flask import Flask, request
import os

app = Flask(__name__)

@app.route('/ssrf', methods=['GET'])
def ssrf():
    url = request.args.get('url', 'http://example.com')
    try:
        response = requests.get(url)
        return response.text
    except Exception as e:
        return str(e)

@app.route('/parameter_tampering', methods=['GET'])
def parameter_tampering():
    discount = float(request.args.get('discount', 0.0))
    original_price = 100.0
    price = original_price * (1 - discount)
    return {'original_price': original_price, 'discount': discount, 'price': price}

@app.route('/error_based_information_disclosure', methods=['GET'])
def error_based_information_disclosure():
    secret_key = request.args.get('secret_key', None)
    if secret_key != app.config['SECRET_KEY']:
        return {'error': 'Invalid secret key'}, 401
    return {'data': 'Protected data'}

if __name__ == '__main__':
    os.environ["WERKZEUG_DEBUG_PIN"]='111-111-111'
    app.config['SECRET_KEY'] = 'this_is_a_secret_key'
    app.run(host='0.0.0.0', port=8344, debug=True)
    app.run(debug=True)