🎫
Squid
  • Squid
    • Summary
  • Enumeration
    • TCP
    • UDP
    • Web Services
  • Exploitation
  • Priv Escalation
Powered by GitBook
On this page
  1. Enumeration

Web Services

PreviousUDPNextExploitation

Last updated 2 years ago

Bypassing Proxies

This repo has a tool called spose.py when we provide the address of the url we are able to expose hidden services behind a proxy. 

python3 spose.py --proxy http://192.168.143.189:3128 --target 127.0.0.1
Using proxy address http://192.168.143.189:3128
127.0.0.1 3306 seems OPEN 
127.0.0.1 8080 seems OPEN

In our case since the proxy was running on port 3128 we specified that as well as the exposing of the hidden services in 127.0.0.1 which is localhost.

We then add the proxy to our foxy proxy and we are able to navigate to those two ports through 127.0.0.1

GitHub - aancw/spose: Squid Pivoting Open Port ScannerGitHub
Logo