CVE-2021-40438 PoC — mod_proxy SSRF

Source

Associated Vulnerability

Readme

>Note: Intended only for educational and controlled testing purposes. Only test on systems you have permission to assess.

# CVE-2021-40438 - SSRF Exploit

        ░█▀▀░█░█░█▀▀░░░░░▀▀▄░▄▀▄░▀▀▄░▀█░░░░░░█░█░▄▀▄░█░█░▀▀█░▄▀▄
        ░█░░░▀▄▀░█▀▀░▄▄▄░▄▀░░█/█░▄▀░░░█░░▄▄▄░░▀█░█/█░░▀█░░▀▄░▄▀▄
        ░▀▀▀░░▀░░▀▀▀░░░░░▀▀▀░░▀░░▀▀▀░▀▀▀░░░░░░░▀░░▀░░░░▀░▀▀░░░▀░

## Usage
```bash
# Basic usage
python3 exploit.py "http://vulnerable-site.com" "http://internal-service/"
```

```bash
# With proxy (e.g., Burp Suite)
python3 exploit.py "http://vulnerable-site.com" "http://internal-service/" --proxy "http://127.0.0.1:8080"
```

## Arguments
- `url`: The target vulnerable URL
- `ssrf`: The internal service URL to fetch
- `-p, --proxy`: (Optional) HTTP proxy to use for debugging



https://www.cvedetails.com/cve/CVE-2021-40438

File Snapshot

 [4.0K]  /data/pocs/6b99d51cb960001e1ed3e578df862f627f813a18
├── [1.7K]  exploit.py
└── [1.1K]  README.md

1 directory, 2 files

Remarks