From d71084f47f794764807966e854657ebee11f9e29 Mon Sep 17 00:00:00 2001 From: Matej Date: Wed, 13 Mar 2024 16:01:53 +0100 Subject: [PATCH] Update 3128-pentesting-squid.md Add credentials example for proxychains4.conf --- network-services-pentesting/3128-pentesting-squid.md | 1 + 1 file changed, 1 insertion(+) diff --git a/network-services-pentesting/3128-pentesting-squid.md b/network-services-pentesting/3128-pentesting-squid.md index 898ada341..cb336d5a4 100644 --- a/network-services-pentesting/3128-pentesting-squid.md +++ b/network-services-pentesting/3128-pentesting-squid.md @@ -43,6 +43,7 @@ curl --proxy http://10.10.11.131:3128 http://10.10.11.131 You can also try to abuse the proxy to **scan internal ports proxifying nmap**.\ Configure proxychains to use the squid proxy adding he following line at the end of the proxichains.conf file: `http 10.10.10.10 3128` +For proxies requiring authentication, append credentials to the configuration by including the username and password at the end: `http 10.10.10.10 3128 username passw0rd`. Then run nmap with proxychains to **scan the host from local**: `proxychains nmap -sT -n -p- localhost`