Update 3128-pentesting-squid.md

Add credentials example for proxychains4.conf
This commit is contained in:
Matej 2024-03-13 16:01:53 +01:00 committed by GitHub
parent d0d38b4b86
commit d71084f47f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -43,6 +43,7 @@ curl --proxy http://10.10.11.131:3128 http://10.10.11.131
You can also try to abuse the proxy to **scan internal ports proxifying nmap**.\
Configure proxychains to use the squid proxy adding he following line at the end of the proxichains.conf file: `http 10.10.10.10 3128`
For proxies requiring authentication, append credentials to the configuration by including the username and password at the end: `http 10.10.10.10 3128 username passw0rd`.
Then run nmap with proxychains to **scan the host from local**: `proxychains nmap -sT -n -p- localhost`