go-out

A simple, Golang egress buster using @mubix letmeoutofyour.net and @bhinfosecurity allports.exposed services.

Installation

git clone https://github.com/sensepost/go-out.git
go build -o go-out main.go

Or download newest binary from the releases

Usage

./go-out

Flags

  -end int
        The end port to use. (default 65535)
  -https
        Egress bust using HTTPs. (letmeout only) (default true)
  -insecure
        Don't verify the certificate when using HTTPs.
  -invert
        Invert results of the egress bust.
  -r    Randomise port scanning order
  -service string
        Use 'letmeout' or 'allports' for this run. (default "letmeout")
  -start int
        The start port to use. (default 1)
  -throttle
        Throttle request speed. (random for a max of 10sec)
  -timeout int
        Timeout in seconds. (default 5)
  -version
        Print the version and exit
  -w int
        Number of concurrent workers to spawn. (default 5)

Examples

Checking on HTTP protocol on port range from 80 to 100

$ ./go-out -start=80 -end=100 -https=false
===== Configuration =====
Service:        letmeout
Start Port:     80
End Port:       100
Workers:        5
HTTPS On:       false
Ignore Certs:   false
Invert:         false
Timeout:        5
Throttle:       false
Random Ports:   false
=========================

[!] Looks like we have egress using http://go-out.letmeoutofyour.net:80 on port 80
[!] Looks like we have egress using http://go-out.letmeoutofyour.net:90 on port 90
[!] Looks like we have egress using http://go-out.letmeoutofyour.net:99 on port 99
[!] Looks like we have egress using http://go-out.letmeoutofyour.net:100 on port 100
Done in 6.32565113s

Checking on HTTPS protocol on port range from 80 to 443

$ ./go-out -start=80 -end=443             
===== Configuration =====
Service:        letmeout
Start Port:     80
End Port:       443
Workers:        5
HTTPS On:       true
Ignore Certs:   false
Invert:         false
Timeout:        5
Throttle:       false
Random Ports:   false
=========================

[!] Looks like we have egress using https://go-out.letmeoutofyour.net:443 on port 443
[!] Looks like we have egress using https://go-out.letmeoutofyour.net:435 on port 435
Done in 36.501049166s

URL list