41 matches found
Request-Baskets <= 1.2.1 - Server Side Request Forgery
Request-Baskets = 1.2.1 allows unauthenticated SSRF via the forwardurl parameter when creating a new basket. id: CVE-2023-27163 info: name: Request-Baskets = 1.2.1 - Server Side Request Forgery author: Jaenact severity: medium description: | Request-Baskets = 1.2.1 allows unauthenticated SSRF via...
CVE-2023-27163
CVE-2023-27163 PoC CVE-2023-27163, SSRF, request-baskets up to v1.2.1 Usage example myscript.sh -i 10.10.11.111 -f 'localhost:80' -t 10.10.14.27 -i victim server IP -f IP or address to direct connections produced by the SSRF -t in this option goes your local IP or attacker IP, for generating the...
CVE-2023-27163-POC
CVE-2023-27163 Poc of SSRF for Request-Baskets CVE-2023-27163 based on this code from entr0pie. The PoC is expanded to fuzz the content of another web service local or otherwise and return the content of the files found. Usage root@kitploit: python3 CVE-2023-27163.py http://: -t http://: -w...
CVE-2023-27163
CVE-2023-27163 - Request Baskets SSRF Request Baskets SSRF PoC alt text Request Baskets versions notes Credit to @beet1e from Shanghai Jiao Tong University and @chenlibo147 , @houqinsheng, [email protected] from Shandong University. Article : https://notes.sjtu.edu.cn/s/MUUhEymt7...
CVE-2023-27163
Proof Of Concept of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and...
CVE-2023-27163
PoC of SSRF on Request-Baskets CVE-2023-27163 This repository contains a Proof-of-Concept PoC for CVE-2023-27163, a Server-Side Request Forgery SSRF vulnerability discovered in request-baskets up to version 1.2.1. This vulnerability allows attackers to access network resources and sensitive...
CVE-2023-27163-POC
CVE-2023-27163 CVE-2023-27163 Request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request. This POC utilizes the...
CVE-2023-27163
CVE-2023-27163 Request-Baskets v1.2.1 - Server-side request forgery SSRF request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery SSRF via the component /api/baskets/name. This vulnerability allows attackers to access network resources and sensitive information via a...
basketcraft
basketcraft this is a script that exploits the CVE-2023-27163 vulnerability which is an SSRF in the request-baskets version 1.2.1 SSRF on Request-Baskets CVE-2023–27163 CVE-2023–27163 represents a critical Server-Side Request Forgery SSRF vulnerability that was identified in Request-Baskets,...
CVE-2023-27163-exploit
CVE-2023-27163 — request-baskets SSRF Exploit Ho scritto questo exploit per colpire CVE-2023-27163 , una vulnerabilità di Server-Side Request Forgery SSRF presente in request-baskets versioni ≤ 1.2.1. Il difetto risiede nell'endpoint /api/baskets/name, dove il parametro forwardurl consente a un...
htb-sau-exploit-chain
Catena di exploit HTB Sau — CVE-2023-27163 SSRF + Automazione della RCE di Maltrail Uno script di exploit in Python che combina CVE-2023-27163 Server-Side Request Forgery in Request Baskets ≤ 1.2.1 con una vulnerabilità di esecuzione remota di codice non autenticata in Maltrail 0.53, fornendo una...
CVE-2023-27163-Request-Baskets-Local-Ports-Bruteforcer
CVE-2023-27163 - Proof of Concept SSRF di Request-Baskets Questa è una proof-of-concept PoC di exploit e un bruteforcer di porte localhost per CVE-2023-27163 , una vulnerabilità di server-side request forgery SSRF in Request-Baskets. La PoC sfrutta il parametro forwardurl per effettuare una...
cve-2023-27163
Danke an @beet1ehttps://github.com/b33t1e von der Shanghai Jiao Tong Universität und @chenlibo147 , @houqinsheng, [email protected] von der Shandong Universität. Bitte lesen Sie https://notes.sjtu.edu.cn/s/MUUhEymt7 für ausführliche Informationen über die SSRF-Sicherheitslücke CVE-2023-27163...
CVE-2023-27163
CVE-2023-27163 Questa è una PoC per CVE-2023-27163, una vulnerabilità SSRF presente in request-baskets fino alla v1.2.1. Questa vulnerabilità consente agli attaccanti di accedere a risorse di rete sensibili tramite /api/baskets/name. request-baskets contiene una funzionalità che consente a un...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163 — request-baskets SSRF Exploit I wrote this ex...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
Sau Hack The Box – Sau Writeup Overview Sau is an...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163---Maltrail-0.53---RCE...
Exploit for Server-Side Request Forgery in Rbaskets Request_Baskets
CVE-2023-27163---SSRF-Baskets-Reques...