This is a functional exploit for an SSRF vulnerability in Adminer <= v4.3.1, allowing unauthenticated port scanning of internal systems via crafted HTTP requests. The included 'PortMiner' tool automates the process by analyzing error responses to determine open/closed ports.
Classification
Working Poc 95%
Attack Type
Ssrf
Complexity
Moderate
Reliability
Reliable
Target:Adminer <= v4.3.1
No auth needed
Prerequisites:Access to a vulnerable Adminer instance · Network connectivity to the target system