{"repo":"iktok90-design/btcpay-scanner","free":true,"listed":false,"github":"https://github.com/iktok90-design/btcpay-scanner","clone":"git clone https://github.com/iktok90-design/btcpay-scanner.git","description":"Network scanner for BTCPay Server instances — version detection, SSRF CVE auditor (< 2.4.2), and Lightning node discovery","language":"JavaScript","stars":13,"topics":["bitcoin","btcpay","btcpayserver","crypto","cve","lightning-network","lnd","network-scanner","node-discovery","penetration-testing"],"license":"MIT","category":"security-tools","readme_excerpt":"BTCPay Server Scanner Network reconnaissance tool for BTCPay Server deployments — version detection, Lightning node discovery, and SSRF vulnerability auditor. A lightweight, concurrent scanner for identifying BTCPay Server instances across networks, auditing for known vulnerabilities (CVE-2024-XXXX), and discovering Lightning Network (LND) node configurations. Features - BTCPay Version Detection — Probes HTTP endpoints and API to fingerprint server versions - SSRF CVE Auditor — Tests for GetLNURLRequest model-binding vulnerability (BTCPay < 2.4.2) - LND Node Discovery — Detects exposed LND REST interfaces on common ports - Macaroon Extraction — Captures LND authentication tokens via SSRF when vulnerable - CIDR Range Scanning — Scan entire subnets with configurable concurrency - Multiple Output Formats — JSON, CSV, human-readable table Prerequisites - Node.js version 14 or higher (npm is included) - Git (to clone the repository) Verify your installation: Installation Quick Start Usage Scan Modes Standard Scan Detects BTCPay Server presence and Lightning node status without any exploitation. Safe for reconnaissance and inventory. Audit Mode ( --audit ) Attempts SSRF exploitation (CVE-2024-XXXX) against BTCPay servers running versions below 2.4.2 . When successful, extracts the LND admin macaroon and queries node status, balance, and channel information. Vulnerability Details CVE-2024-XXXX — SSRF via GetLNURLRequest Model Binding Affected : BTCPay Server < 2.4.2 ASP.NET model bi","default_branch":null,"files":null,"tree":[],"storefront":"/r/iktok90-design","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/iktok90-design/btcpay-scanner/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}