# tarunkant/Gopherus

This tool generates gopher link for exploiting SSRF and gaining RCE in various servers

Repository: https://github.com/tarunkant/Gopherus
Canonical: https://ross.abutalabs.com/products/gopherus
Language: Python
License: MIT
License Family: permissive
Topics: rce, ssrf, mysql, redis, zabbix, memcache, gopher, github-rce, fastcgi, smtp, postgresql
Last push: 2023-04-18T11:47:14+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2944, "days_push": 1233, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3411, forks 403 (observed 2026-08-28T04:08:03.432189+00:00)

## What it is
Gopherus is a Python CLI tool that generates Gopher protocol payloads for exploiting SSRF vulnerabilities to achieve remote code execution. It supports crafting exploit links for MySQL, PostgreSQL, FastCGI, Memcached, Redis, Zabbix, and SMTP services.

## Use cases
- generate gopher payloads for ssrf exploitation
- get rce via ssrf in redis
- exploit fastcgi port 9000 for remote code execution
- craft gopher link for mysql without password
- get reverse shell through ssrf
- exploit memcached deserialization via ssrf

## When to choose
- you found an SSRF vulnerability and want to escalate to RCE
- you need ready-made gopher payloads for common services during a pentest
- you want a quick interactive CLI to generate exploit links

## When to avoid
- you need a general-purpose vulnerability scanner
- you have no SSRF-prone entry point to deliver gopher payloads
- you need a maintained tool with frequent updates

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, penetration-testing, cli
- domain: security, penetration-testing, developer-tools
- platform: python, cli
- tags: ssrf, rce, gopher, payload-generator, exploitation, pentest, reverse-shell, linux

## Member repositories
- tarunkant/Gopherus (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:03.432189+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:38:31.571913+00:00, confidence not recorded.
  - readme: https://github.com/tarunkant/Gopherus (fetched 2026-08-28T04:08:03.432189+00:00, sha 628a28920ac6)
- Data as of 2026-08-30T08:39:29.467469+00:00.