Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/madhavmehndiratta/cve-2023-27163
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringWeb SecurityPenetration Testing
GitHubmadhavmehndiratta/cve-2023-27163

CVE-2023-27163

Proof-of-concept exploit for CVE-2023-27163, an SSRF vulnerability in request-baskets v1.2.1, allowing access to internal network resources via crafted API requests.

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-27163

This is a PoC for CVE-2023-27163 which is a SSRF vulnerability present in request-baskets upto v1.2.1. This vulnerability allows attackers to access sensitive network resources via /api/baskets/{name}. The request-baskets contains a functionality where a user can specify another server to forward the requests.

The issue here is that the user can also specify unintended services, such as network-closed internal applications.

Usage

root@kitploit:~
$ python3 CVE-2023-27163.py --help
Usage: python3 CVE-2023-27163.py <URL> <TARGET>

Arguments:
URL		main path (/) of the server (eg. http://node-app:55555)
TARGET		r-baskets target server (eg. http://127.0.0.1:80)

References

  • https://github.com/darklynx/request-baskets
  • https://notes.sjtu.edu.cn/s/MUUhEymt7
  • https://nvd.nist.gov/vuln/detail/CVE-2023-27163
  • https://github.com/advisories/GHSA-58g2-vgpg-335q
    • Download Tool