Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

CVE-2023-27163 PoC — request-baskets 代码问题漏洞

Source
Associated Vulnerability
Title: request-baskets 代码问题漏洞 (CVE-2023-27163)
Description:request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.
Description
Python implementation of CVE-2023-27163
Readme
# CVE-2023-27163
Python implementation of CVE-2023-27163

## Installation

To install the project dependencies, follow these steps:

1. Clone the repository:
 
~~~
git clone https://github.com/your_username/your_repository.git`
~~~

2. Navigate into the project directory:

~~~
cd your_repository
~~~

3. Install the dependencies using pip:

~~~
pip install -r requirements.txt
~~~
## Usage

This script accepts several command-line arguments:

### Arguments

1. `-t` or `--t`: Basket URL  
   Specifies the URL of the basket you want to interact with.

-t "http://example.com/"

2. `-e` or `--e`: URL to put  
Specifies the URL that you want to place in the basket.

-e "http://127.0.0.1/"

### Example

Here is an example of how to run the script with these arguments:

`python3 your_script.py -t "http://example.com/" -e "http://127.0.0.1/"`
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →