Merge pull request #819 from dekadentno/patch-1

Update 3128-pentesting-squid.md
This commit is contained in:
HackTricks 2024-03-25 15:04:09 +01:00 committed by GitHub
commit 70759f62de
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -43,6 +43,7 @@ curl --proxy http://10.10.11.131:3128 http://10.10.11.131
You can also try to abuse the proxy to **scan internal ports proxifying nmap**.\
Configure proxychains to use the squid proxy adding he following line at the end of the proxichains.conf file: `http 10.10.10.10 3128`
For proxies requiring authentication, append credentials to the configuration by including the username and password at the end: `http 10.10.10.10 3128 username passw0rd`.
Then run nmap with proxychains to **scan the host from local**: `proxychains nmap -sT -n -p- localhost`