A simple, Golang egress buster using @mubix letmeoutofyour.net and @bhinfosecurity allports.exposed services.
Download the latest release for your platform from the releases page.
This project makes use of Go modules, and therefore needs Golang 1.12 to build.
To build go-out from source, simply clone this repository and go build -o go-out main.go. If you would like to cross compile for other platforms, take a look at the Makefile.
CLI flags:
Usage of go-out:
-end int
The end port to use. (default 65535)
-https
Egress bust using HTTPs (letmeout only) (default true)
-insecure
Don't verify the certificate when using HTTPs
-service string
Use 'letmeout' or 'allports' for this run. (default "letmeout")
-start int
The start port to use. (default 1)
-throttle
Throttle request speed. (random for a max of 10sec)
-w int
Number of concurrent workers to spawn. (default 5)
Sample run:
$ go-out -start=50 -end=80
===== Configuration =====
Service: letmeout
Start Port: 50
End Port: 80
Workers: 5
HTTPS On: true
Ignore Certs: false
Throttle: false
=========================
[!] Looks like we have egress using https://go-out.letmeoutofyour.net:53 on port 53
[!] Looks like we have egress using https://go-out.letmeoutofyour.net:80 on port 80
Done in 9.393870727s
go-out is licensed under the GNU General Public License v3.0 license.
Permissions beyond the scope of this license may be available at http://sensepost.com/contact/.