tarunkant / Gopherus
Licence: mit
This tool generates gopher link for exploiting SSRF and gaining RCE in various servers
Stars: ✭ 1,258
Programming Languages
python
139335 projects - #7 most used programming language
Projects that are alternatives of or similar to Gopherus
Shell
Infrastructure Management Shell - Linux
Stars: ✭ 381 (-69.71%)
Mutual labels: mysql, redis, postgresql, zabbix
Phalcon Vm
Vagrant configuration for PHP7, Phalcon 3.x and Zephir development.
Stars: ✭ 43 (-96.58%)
Mutual labels: mysql, redis, postgresql, memcache
Gobackup
🗄 Simple tool for backup your databases, files to FTP / SCP / S3 storages.
Stars: ✭ 472 (-62.48%)
Mutual labels: mysql, redis, postgresql
Dev Setup
macOS development environment setup: Easy-to-understand instructions with automated setup scripts for developer tools like Vim, Sublime Text, Bash, iTerm, Python data analysis, Spark, Hadoop MapReduce, AWS, Heroku, JavaScript web development, Android development, common data stores, and dev-based OS X defaults.
Stars: ✭ 5,590 (+344.36%)
Mutual labels: mysql, redis, postgresql
Devilbox
A modern Docker LAMP stack and MEAN stack for local development
Stars: ✭ 3,598 (+186.01%)
Mutual labels: mysql, redis, postgresql
Enferno
A Python framework based on Flask microframework, with batteries included, and best practices in mind.
Stars: ✭ 385 (-69.4%)
Mutual labels: mysql, redis, postgresql
Smartsql
SmartSql = MyBatis in C# + .NET Core+ Cache(Memory | Redis) + R/W Splitting + PropertyChangedTrack +Dynamic Repository + InvokeSync + Diagnostics
Stars: ✭ 775 (-38.39%)
Mutual labels: mysql, redis, postgresql
Netkiller.github.io
Netkiller Free ebook - 免费电子书
Stars: ✭ 861 (-31.56%)
Mutual labels: mysql, redis, postgresql
Treefrog Framework
TreeFrog Framework : High-speed C++ MVC Framework for Web Application
Stars: ✭ 885 (-29.65%)
Mutual labels: mysql, redis, postgresql
Octosql
OctoSQL is a query tool that allows you to join, analyse and transform data from multiple databases and file formats using SQL.
Stars: ✭ 2,579 (+105.01%)
Mutual labels: mysql, redis, postgresql
Zabbixdba
Zabbix Database Monitoring Service (Oracle, Pg, MySQL, MS SQL, DB2, etc.)
Stars: ✭ 68 (-94.59%)
Mutual labels: mysql, postgresql, zabbix
Endb
Key-value storage for multiple databases. Supports MongoDB, MySQL, Postgres, Redis, and SQLite.
Stars: ✭ 208 (-83.47%)
Mutual labels: mysql, redis, postgresql
Back End Interview
后端面试题汇总（Python、Redis、MySQL、PostgreSQL、Kafka、数据结构、算法、编程、网络）
Stars: ✭ 188 (-85.06%)
Mutual labels: mysql, redis, postgresql
Pifpaf
Python fixtures and daemon managing tools for functional testing
Stars: ✭ 161 (-87.2%)
Mutual labels: mysql, redis, postgresql
Zxw.framework.netcore
基于EF Core的Code First模式的DotNetCore快速开发框架，其中包括DBContext、IOC组件autofac和AspectCore.Injector、代码生成器（也支持DB First）、基于AspectCore的memcache和Redis缓存组件，以及基于ICanPay的支付库和一些日常用的方法和扩展，比如批量插入、更新、删除以及触发器支持，当然还有demo。欢迎提交各种建议、意见和pr~
Stars: ✭ 691 (-45.07%)
Mutual labels: mysql, redis, postgresql
Wait4x
Wait4X is a cli tool to wait for everything! It can be wait for a port to open or enter to rquested state.
Stars: ✭ 30 (-97.62%)
Mutual labels: mysql, redis, postgresql
Gopherus
If you know a place which is SSRF vulnerable then, this tool will help you to generate Gopher payload for exploiting SSRF (Server Side Request Forgery) and gaining RCE (Remote Code Execution). And also it will help you to get the Reverse shell on the victim server. And for more information you can get a blog on the same Blog on Gopherus
About
This tool can generate payload for following:
- MySQL (Port-3306)
- PostgreSQL(Port-5432)
- FastCGI (Port-9000)
- Memcached (Port-11211)
If stored data is getting De-serialized by:
* Python
* Ruby
* PHP
- Redis (Port-6379)
- Zabbix (Port-10050)
- SMTP (Port-25)
Installation
chmod +x install.sh
sudo ./install.sh
Usage
| Command | Description |
|---|---|
| gopherus --help | Help |
| gopherus --exploit | Arguments can be : |
| --exploit mysql | |
| --exploit postgresql | |
| --exploit fastcgi | |
| --exploit redis | |
| --exploit zabbix | |
| --exploit pymemcache | |
| --exploit rbmemcache | |
| --exploit phpmemcache | |
| --exploit dmpmemcache | |
| --exploit smtp |
Examples
- MySQL: If the user is not protected with password you can dump his database and also you can put malicious files in his system.
gopherus --exploit mysql
It only asks username of the MySQL user and it will provide you gopher link.
- PostgreSQL: If the user is not protected with password you can dump his database and also you can put malicious files in his system.
gopherus --exploit postgresql
It only asks username of the Postgres user and database name then it will provide you gopher link.
- FastCGI: If port 9000 is open with no security then you can get RCE.
gopherus --exploit fastcgi
It only asks for a file which must be present in the victim system(preferable .php file), BTW we have default one.
- Redis: If redis port is open then we can overwrite the file in the system which is too dangerous.
So here is two things you can get:
a. Reverse Shell
b. PHP Shell
gopherus --exploit redis
- Zabbix: If port 10050 is open and
EnableRemoteCommands = 1then you can run shell commands on the victim system.
gopherus --exploit zabbix
- Memcached: It is used for mainly storing serialized data, but when it comes to De-serialize these data then known vulnerability such as PHP De-serialization issue, Python-Pickle De-serialization issue, Ruby-Marshal De-serialization issue comes into picture which can lead to RCE.
So for each of them I created different scripts and also one script for dumping Memcached content:
gopherus --exploit pymemcache
gopherus --exploit rbmemcache
gopherus --exploit phpmemcache
gopherus --exploit dmpmemcache
- SMTP: If port 25 is open and we can access it then, we can send message to anyone as victim user, So this tool will generate gopher payload for sending mail.
gopherus --exploit smtp
Screenshots
Author
Tarunkant Gupta (SpyD3r)
- Website: https://spyclub.tech
- Email: [email protected]
- Twitter: https://twitter.com/TarunkantG
- Linkedin: https://linkedin.com/in/tarunkant-g-215830129/
Reference
- http://legalhackers.com/advisories/vBulletin-SSRF-Vulnerability-Exploit.txt
- http://blog.safebuff.com/2016/07/03/SSRF-Tips/
- https://hackerone.com/reports/115748
- https://www.blackhat.com/docs/us-14/materials/us-14-Novikov-The-New-Page-Of-Injections-Book-Memcached-Injections-WP.pdf
- https://www.exploit-db.com/exploits/42392/
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].