WebWasher Classic Server Mode Arbitrary Proxy CONNECT Request

There is a flaw in the remote WebWasher Proxy. The Proxy, when issued a CONNECT command for 127.0.0.1 or localhost/loopback, will comply with the request and initiate a connection to the local machine. This bypasses any sort of firewalling as well as gives access to local applications which are...

WebWasher Proxy Server < 3.4 Detection

Binary data 2570.prm...

WebWasher Proxy Server Detection

Binary data 2571.prm...