Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-7231 — PoC and Disclosure for CVE-2023-7231 – Memcached Gopher RCE chain | Kitploit
Tools/GitHubGitHub/bbo513/cve-2023-7231
Privilege EscalationReconnaissanceContainer SecurityVulnerability AnalysisExploitationWeb Application ExploitationData ExfiltrationInformation GatheringCloud Security
GitHubbbo513/cve-2023-7231

CVE-2023-7231

PoC and Disclosure for CVE-2023-7231 – Memcached Gopher RCE chain

11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository

CVE-2023-7231 – Critical SSRF → Memcached/Docker RCE Chain via Audible fetchResource

🔥 Summary

This vulnerability enables Server-Side Request Forgery (SSRF) in Audible’s fetchResource API on *.audible.com, allowing unauthenticated attackers to pivot into internal infrastructure.

Through SSRF payload chaining, we achieved:

  • 🛡 AWS EC2 Metadata Access
  • 🐳 Docker Socket Probing on 127.0.0.1:2375
  • 🔐 Credential & PII Exfiltration via /env, /proc/self/environ
  • ✅ Consistent 200 OK responses from internal-only endpoints

📉 Attack Chain

root@kitploit:~
SSRF → AWS Metadata → IAM Role Abuse → S3/Lambda Access  
SSRF → Docker API → Root Container Access  
SSRF → Env Vars → Credential Dump → DB Pivot
Download Tool