Web Services

Bypassing Proxies

GitHub - aancw/spose: Squid Pivoting Open Port ScannerGitHub

This repo has a tool called spose.py when we provide the address of the url we are able to expose hidden services behind a proxy.

python3 spose.py --proxy http://192.168.143.189:3128 --target 127.0.0.1
Using proxy address http://192.168.143.189:3128
127.0.0.1 3306 seems OPEN 
127.0.0.1 8080 seems OPEN 

In our case since the proxy was running on port 3128 we specified that as well as the exposing of the hidden services in 127.0.0.1 which is localhost.

We then add the proxy to our foxy proxy and we are able to navigate to those two ports through 127.0.0.1