A simple, Golang egress buster using @mubix letmeoutofyour.net and @bhinfosecurity allports.exposed services.
Download the latest release for your platform from the releases page.
This project makes use of Go modules, and therefore needs Golang 1.12+ to build.
To build go-out
from source, simply clone this repository and go build -o go-out main.go
. If you would like to cross compile for other platforms, take a look at the Makefile.
CLI flags:
Usage of go-out:
-end int
The end port to use. (default 65535)
-https
Egress bust using HTTPs (letmeout only) (default true)
-insecure
Don't verify the certificate when using HTTPs
-service string
Use 'letmeout' or 'allports' for this run. (default "letmeout")
-start int
The start port to use. (default 1)
-throttle
Throttle request speed. (random for a max of 10sec)
-w int
Number of concurrent workers to spawn. (default 5)
Sample run:
$ go-out -start=50 -end=80
===== Configuration =====
Service: letmeout
Start Port: 50
End Port: 80
Workers: 5
HTTPS On: true
Ignore Certs: false
Throttle: false
=========================
[!] Looks like we have egress using https://go-out.letmeoutofyour.net:53 on port 53
[!] Looks like we have egress using https://go-out.letmeoutofyour.net:80 on port 80
Done in 9.393870727s
go-out is licensed under the GNU General Public License v3.0 license.
Permissions beyond the scope of this license may be available at http://sensepost.com/contact/.