Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2023-27163 PoC — request-baskets 代码问题漏洞

Source
Associated Vulnerability
Title:request-baskets 代码问题漏洞 (CVE-2023-27163)
Description:request-baskets是rbaskets开源的一个Web服务。 request-baskets v1.2.1版本及之前版本存在安全漏洞,该漏洞源于通过组件/api/baskets/{name}发现包含服务器端请求伪造 (SSRF)漏洞。攻击者利用该漏洞通过特制的API请求访问网络资源和敏感信息。
Description
Python implementation of CVE-2023-27163
Readme
# CVE-2023-27163
Python implementation of CVE-2023-27163

## Installation

To install the project dependencies, follow these steps:

1. Clone the repository:
 
~~~
git clone https://github.com/your_username/your_repository.git`
~~~

2. Navigate into the project directory:

~~~
cd your_repository
~~~

3. Install the dependencies using pip:

~~~
pip install -r requirements.txt
~~~
## Usage

This script accepts several command-line arguments:

### Arguments

1. `-t` or `--t`: Basket URL  
   Specifies the URL of the basket you want to interact with.

-t "http://example.com/"

2. `-e` or `--e`: URL to put  
Specifies the URL that you want to place in the basket.

-e "http://127.0.0.1/"

### Example

Here is an example of how to run the script with these arguments:

`python3 your_script.py -t "http://example.com/" -e "http://127.0.0.1/"`
File Snapshot

[4.0K] /data/pocs/4c70b75b80143cc7a69327829d54e7a80c01151c ├── [1.5K] CVE-2023-27163.py ├── [ 845] README.md └── [ 17] requirements.txt 0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.