关联漏洞
标题：
request-baskets 代码问题漏洞
(CVE-2023-27163)
描述：request-baskets是rbaskets开源的一个Web服务。 request-baskets v1.2.1版本及之前版本存在安全漏洞，该漏洞源于通过组件/api/baskets/{name}发现包含服务器端请求伪造 (SSRF)漏洞。攻击者利用该漏洞通过特制的API请求访问网络资源和敏感信息。
描述
PoC and internal port brute-forcer for CVE-2023-27163
介绍
# CVE-2023-27163 - Request-Baskets SSRF Proof of Concept
This is a proof-of-concept (PoC) exploit and a localhost port bruteforcer for **CVE-2023-27163**, a server-side request forgery (SSRF) vulnerability in [Request-Baskets](https://github.com/darklynx/request-baskets).
The PoC abuses the forward_url parameter to perform a brute-force scan of active services bound to the local interface.
Once discovered, these services can then be accessed by the attacker through the vulnerable forwarding mechanism.
---
## Description
- CVE: [CVE-2023-27163](https://nvd.nist.gov/vuln/detail/CVE-2023-27163)
- Affected: Request-Baskets
- Impact: Allows an attacker to trigger SSRF to internal addresses
---
## Requirements
- Python 3.x
- `requests` library
```bash
pip install requests
```
## Usage
```bash
python3 CVE-2023-27163.py -u https://TARGET_URL -b BASKET_NAME -p ports.txt
```
文件快照
[4.0K] /data/pocs/ab32ea710c670fe81a9b95ae3364db5005f314e9
├── [4.7K] CVE-2023-27163.py
├── [ 889] README.md
├── [ 41K] top-ports-10000.txt
├── [4.9K] top-ports-1000.txt
└── [ 25K] top-ports-5000.txt
0 directories, 5 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。