Gopherus - This tool generates gopher link for exploiting SSR

项目说明

Gopherus

If you know a place which is SSRF then, this 工具 will help you to generate Gopher payload for exploiting SSRF (服务端 Side Request Forgery) and gaining RCE (Remote 代码 Execution). And also it will help you to get the Reverse shell on the 服务端. And for more
information you can get a blog on the same Blog on Gopherus

About

This 工具 can generate payload for following:
1. MySQL (Port-3306)
2. PostgreSQL(Port-5432)
3. FastCGI (Port-9000)
4. Memcached (Port-11211)
- If stored data is getting De-serialized by: <br>
- Python <br>
- Ruby <br>
- PHP <br>
5. Redis (Port-6379)
6. Zabbix (Port-10050)
7. SMTP (Port-25)

Installation

Usage

| Command | Description |
|--------------------------|--------------------------------|
| gopherus --help | Help |
| gopherus --exploit | Arguments can be : |
| | --exploit mysql |
| | --exploit postgresql |
| | --exploit fastcgi |
| | --exploit redis |
| | --exploit zabbix |
| | --exploit pymemcache |
| | --exploit rbmemcache |
| | --exploit phpmemcache |
| | --exploit dmpmemcache |
| | --exploit smtp |

Examples

* MySQL: If the user is not protected with password you can dump his 数据库 and also you can put malicious files in his system.

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;It only asks username of the MySQL user and it will provide you gopher link.

* PostgreSQL: If the user is not protected with password you can dump his 数据库 and also you can put malicious files in his system.

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;It only asks username of the Postgres user and 数据库 name then it will provide you gopher link.

* FastCGI: If port 9000 is open with no security then you can get RCE.

&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;It only asks for a file which must be present in the system(preferable .php file), BTW we ha one.

* Redis: If redis port is open then we can o the file in the system which is too dangerous.
So here is two things you can get:<br>
a. Reverse Shell<br>
b. PHP Shell<br>

* Zabbix: If port 10050 is open and EnableRemoteCommands = 1 then you can run shell commands on the system.

* Memcached: It is used for mainly storing serialized data, but when it comes to De-serialize these data then known such as PHP De-serialization issue, Python-Pickle De-serialization issue, Ruby-Marshal De-serialization issue comes into picture which can lead to RCE.
So for each of them I created different scripts and also one script for dumping Memcached content:

* SMTP: If port 25 is open and we can access it then, we can send message to anyone as user, So this 工具 will generate gopher payload for sending mail.

Screenshots

!image
!image
!image
!image
!image

Author

Tarunkant Gupta (SpyD3r)
* Website:
* Email:
* Twitter:
* Linkedin:

Reference

*
*
*
*
*

项目信息

开发语言：Python

Star 数：3423

技术要点

该项目属于黑客技术方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕This 工具 generates gopher link for exploiting SSRF and gaining RCE in servers展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。