lorsrf v2.1 releases: find SSRF or Out-of-band resource load

lorsrf

lorsrf is just a web pen-testing tool that I wrote to find the parameters that can be used to find SSRF or Out-of-band resource load by adding an OAST host like Burp Collaborator to the parameter value, above of all, the request that will be received in Burp Collaborator will be an HTTP request without any real pieces of information about the target, I was thinking about how can I get vulnerable parameter/endpoint, Hence I made a simple feature is that allowed you to add some pieces of information of the target in your OAST host as a variable.

you can use these to include more information in your OAST host

target: http://testphp.vulnweb.com/showimage.php
payload: http://%HOST%.%PARAM%.testing.interactsh.com%PATH%
output: http://testphp.vulnweb.com.file.testing.interactsh.com/showimage.php

by default, lorsrf use the GET method if you want a post method with form body or json you can add these flags

$ lorsrf –json –form

Changelog v2.1

• Fix progressbar

Install

1. install rust from https://www.rust-lang.org/learn/get-started
2. run these commmands
   >>> apt install gcc pkg-config libssl-dev
   >>> cargo install –git https://github.com/knassar702/lorsrf

Use

Lorsrf 2.0

Khaled Nassar <knassar702@gmail.com>

SSRF Parameter BruteForce Tool



USAGE:

    lorsrf [FLAGS] [OPTIONS] --call <host> --urls <targets>



FLAGS:

    -f, --form         Use x-www-form-urlencoded requests via POST method

    -h, --help         Prints help information

    -j, --json         Use JSON requests via POST method

        --post-only    POST method only

    -V, --version      Prints version information



OPTIONS:

    -H, --headers <headers>      Your Headers [default: ]

    -c, --call <host>            Your The OAST Host (burpsuite collaborator or interactsh.com)

    -p, --proxy <proxy>          SendProxy [default: ]

    -u, --urls <targets>         Your Targets list

        --threads <threads>      Your Threads [default: 10]

    -t, --timeout <timeout>      Set the Timeout of the requests [default: 10]

    -w, --wordlist <wordlist>    Your Parameters Wordlist

Examples

• json

• form

parameter scanner without guessing

Copyright (C) 2020 knassar702 

Source: https://github.com/knassar702/