https://github.com/mulx10/httpoxyscan
https://github.com/mulx10/httpoxyscan
Last synced: 12 months ago
JSON representation
- Host: GitHub
- URL: https://github.com/mulx10/httpoxyscan
- Owner: MuLx10
- Created: 2017-06-24T15:46:51.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2017-06-24T15:47:49.000Z (about 9 years ago)
- Last Synced: 2024-12-30T13:10:35.651Z (over 1 year ago)
- Language: Python
- Size: 4.88 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# HTTPoxy Exploit Scanner
by 1N3 @CrowdShield (https://crowdshield.com)
Last Updated: 20160720
## ABOUT:
PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments. For more details, go to https://httpoxy.org.
## REQUIREMENTS:
Requires ncat to establish reverse session
## USAGE:
```
./httpoxyscan.py https://target.com cgi_list.txt 10.1.2.243 3000
```
This will scan https://target.com with a list of common CGI files while injecting a Proxy header back to a given IP:PORT. A reverse listener will catch the incoming connection to confirm the remote site is vulnerable.
## DISCLAIMER:
I take no responsibility for wrong doing or misuse of this exploit.