MonSoen.py
ID: 1c1ca95a-fcd3-5a73-b3a4-3f8055e45af3
STIX ID: report--1c1ca95a-fcd3-5a73-b3a4-3f8055e45af3
Feed Name: SensePost Blog
Threat Score
The report demonstrates that WinGate proxy's CONNECT handling permits reaching a local-only remote management agent bound to 127.0.0.1:808, due to lack of access controls. The author provides a Python tool (MonSoen.py) that tunnels connections through vulnerable proxies and can be used to access the GateKeeper admin interface and perform network scanning via the proxy.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.