sensepost / go-out

☄️ go-out - A Golang egress buster.

☄️ go-out

A simple, Golang egress buster using @mubix letmeoutofyour.net and @bhinfosecurity allports.exposed services.

install

Download the latest release for your platform from the releases page.

building from source

This project makes use of Go modules, and therefore needs Golang 1.12+ to build.

To build go-out from source, simply clone this repository and go build -o go-out main.go. If you would like to cross compile for other platforms, take a look at the Makefile.

sample usage

CLI flags:

Usage of go-out:
  -end int
   The end port to use. (default 65535)
  -https
   Egress bust using HTTPs (letmeout only) (default true)
  -insecure
   Don't verify the certificate when using HTTPs
  -service string
   Use 'letmeout' or 'allports' for this run. (default "letmeout")
  -start int
   The start port to use. (default 1)
  -throttle
   Throttle request speed. (random for a max of 10sec)
  -w int
   Number of concurrent workers to spawn. (default 5)

Sample run:

$ go-out -start=50 -end=80
===== Configuration =====
Service:      letmeout
Start Port:   50
End Port:     80
Workers:      5
HTTPS On:     true
Ignore Certs: false
Throttle:     false
=========================

[!] Looks like we have egress using https://go-out.letmeoutofyour.net:53 on port 53
[!] Looks like we have egress using https://go-out.letmeoutofyour.net:80 on port 80
Done in 9.393870727s

contact

@leonjza

license

go-out is licensed under the GNU General Public License v3.0 license.

Permissions beyond the scope of this license may be available at http://sensepost.com/contact/.

go-out's Issues

Feature Request - Randomize Ports

It'd be nice to not look like a scanner when a ton of ports are hitting the same host ;-)

Feature request: Invert results

Some people may want to just know what ports are not allowed out. (Like home users wanting to know what ports their ISP blocks. Would be nice to be able to check that.