43 matches found
CVE-2023-27163
PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...
CVE-2023-27163-POC
CVE-2023-27163 Poc of SSRF for Request-Baskets CVE-2023-27163 based on this code from entr0pie. The PoC is expanded to fuzz the content of another web service local or otherwise and return the content of the files found. Usage python3 CVE-2023-27163.py http://: -t http://: -w...
CVE-2023-27163
CVE-2023-27163 - Request Baskets SSRF Request Baskets SSRF PoC alt text Request Baskets versions notes Credit to @beet1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Article : https://notes.sjtu.edu.cn/s/MUUhEymt7...
CVE-2023-27163
CVE-2023-27163 PoC CVE-2023-27163, SSRF, request-baskets up to v1.2.1 Usage example myscript.sh -i 10.10.11.111 -f 'localhost:80' -t 10.10.14.27 -i victim server IP -f IP or address to direct connections produced by the SSRF -t in this option goes your local IP or attacker IP, for generating the...
CVE-2023-27163-POC
CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...
CVE-2023-27163
Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...
Request-Baskets <= 1.2.1 - Server Side Request Forgery
Request-Baskets = 1.2.1 allows unauthenticated SSRF via the forwardurl parameter when creating a new basket. id: CVE-2023-27163 info: name: Request-Baskets = 1.2.1 - Server Side Request Forgery author: Jaenact severity: medium description: | Request-Baskets = 1.2.1 allows unauthenticated SSRF via...
CVE-2023-27163-exploit
CVE-2023-27163 — request-baskets SSRF Exploit I wrote this exploit to target CVE-2023-27163 , a Server-Side Request Forgery SSRF vulnerability found in request-baskets versions ≤ 1.2.1. The flaw lives in the /api/baskets/name endpoint, where the forwardurl parameter allows an attacker to make the...
CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer
CVE-2023-27163 - Request-Baskets SSRF Proof of Concept This is a proof-of-concept PoC exploit and a localhost port bruteforcer for CVE-2023-27163 , a server-side request forgery SSRF vulnerability in Request-Baskets. The PoC abuses the forwardurl parameter to perform a brute-force scan of active...
htb-sau-exploit-chain
HTB Sau Exploit Chain — CVE-2023-27163 SSRF + Maltrail RCE Automation A Python exploit script that chains CVE-2023-27163 Server-Side Request Forgery in Request Baskets ≤ 1.2.1 with an unauthenticated Remote Code Execution vulnerability in Maltrail 0.53, delivering a reverse shell. Designed for th...
CVE-2023-27163
CVE-2023-27163 Request-Baskets v1.2.1 - Server-side request forgery SSRF request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a...
CVE-2023-27163-lab
CVE-2023-27163 — Request-Baskets SSRF Lab Project: Vulnerability Research & Reproduction Lab — CVE-2023-27163 Author: Amulya Kaushik Role: Cybersecurity R&D & Lab Content Development Intern Candidate Server-Side Request Forgery in Request-Baskets ≤ 1.2.1 A self-contained local research lab for...
CVE-2023-27163
CVE-2023-27163 This is a PoC for CVE-2023-27163 which is a SSRF vulnerability present in request-baskets upto v1.2.1. This vulnerability allows attackers to access sensitive network resources via /api/baskets/name. The request-baskets contains a functionality where a user can specify another serv...
cve-2023-27163
Thank you to @beet1ehttps://github.com/b33t1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Please review https://notes.sjtu.edu.cn/s/MUUhEymt7 for indepth information about the SSRF vulnerability CVE-2023-27163. This code is...
basketcraft
basketcraft este es un script que explota la vulnerabilidad CVE-2023-27163, que es un SSRF en request-baskets versión 1.2.1 SSRF en Request-Baskets CVE-2023–27163 CVE-2023–27163 representa una vulnerabilidad crítica de falsificación de solicitudes del lado del servidor Server-Side Request Forgery...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163 — request-baskets SSRF Exploit I wrote this ex...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
Sau Hack The Box – Sau Writeup Overview Sau is an...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163---Maltrail-0.53---RCE...