muraena

Muraena — это почти прозрачный обратный прокси-сервер, предназначенный для автоматизации фишинговых и пост-фишинговых действий. Инструмент заново реализует 15-летнюю идею использования кастомного обратного прокси-сервера для динамического взаимодействия с целевым источником, а не для поддержки и...

cs2modrewrite

Автоматическая генерация правил для Apache modrewrite или Nginx для интеллектуальной HTTP C2-переадресации Этот проект преобразует профиль Cobalt Strike в функциональный файл modrewrite .htaccess или конфигурационный файл Nginx для поддержки обратного проксирования HTTP на командный сервер...

multitor

multitor Créez plusieurs instances TOR avec équilibrage de charge. Description • Introduction • Utilisation • Paramètres • Prérequis • Docker • Autres • Licence • Wiki Description Fournit un point d'accès unique pour les clients. Prend en charge HAProxy , le protocole socks et les serveurs...

wreckuests

Qu'est-ce que c'est ? Wreckuests est un script qui vous permet d'exécuter des attaques DDoS avec HTTP-flood GET/POST. Il est écrit en Python pur et utilise des serveurs proxy comme « bots ». BIEN SÛR, ce script n'est pas universel et vous ne pouvez pas faire tomber le site du Pentagone/NSA/autre...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS est un scanner de vulnérabilité d'injection SQL entièrement fonctionnel supportant les paramètres GET et POST écrit en moins de 100 lignes de code. En ce qui concerne les paramètres optionnels, il supporte le proxy HTTP ainsi que les valeurs...

CVE-2023-38545

CVE-2023-38545: Curl 취약점 PoCProof of Concept 이 저장소는 CVE-2023-38545 취약점에 대한 시스템 테스트를 위해 설계된 PoCProof of Concept를 포함하고 있습니다. 이 취약점은 curl 유틸리티, 특히 7.69.0과 8.3.1 사이의 버전에 영향을 미치며 HTTP 리디렉션 처리와 관련이 있습니다. 사전 요구 사항 필수 소프트웨어: curl 기능 포트 1080에서 실행되는 SOCKS5 프록시 서버 포트 8000에서 실행되는 HTTP 서버 취약점 테스트를 위한 자동화 스크립트...

CVE-2023-47246-EXP

Détails de la vulnérabilité 1. fofa: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Versions affectées : SysAid Server23.3.36 Reproduction de la vulnérabilité 1. Exécutez le script : git clone...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: komodo, sccache, ntpd-rs, apollo-router, linkerd2-proxy...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: sccache, ntpd-rs, linkerd2-proxy...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: sccache, ntpd-rs, linkerd2-proxy...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: sccache, ntpd-rs, linkerd2-proxy...

CVE-2023-26360

CVE-2023-26360 Utilisation Usage: python3 script.py endpoint proxyurl Lecture des fichiers...

Admin-Scanner

Admin-Scanner Recherche de panneau d'administration de sites web Comment installer ? Linux/pc sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner Comment installer ? Termux/Android pkg update && p...

Geoserver - Server-Side Request Forgery

GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows server-side request forgery via the option for setting a proxy host. id: CVE-2021-40822 info: name: Geoserver - Server-Side Request Forgery author: For3stCo1d,aringo-bf severity: high description: GeoServer through 2.18.5 and 2.19.x throug...

SAP NetWeaver Development Infrastructure - Server Side Request Forgery

Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...

Apache Druid - Server-Side Request Forgery

Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid.This issue affects all previous Druid versions.When using the Druid management proxy, a request tha...

LoLLMs WEBUI - Server-Side Request Forgery

LoLLMs WEBUI contains a server-side request forgery caused by unauthenticated access to the /api/proxy endpoint, letting attackers force the server to make arbitrary GET requests, exploit requires no authentication. id: CVE-2026-33340 info: name: LoLLMs WEBUI - Server-Side Request Forgery author:...

Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting

Etherpad versions 2.1.0 through 3.0.0 reflect the x-proxy-path request header into admin HTML, JavaScript, and CSS responses without sanitization. An attacker can abuse this behavior to inject crafted content into generated resource URLs, enabling cross-site scripting and cache poisoning scenario...

Apache HTTP Server - ACL Bypass

Encoding problem in modproxy in Apache HTTP Server 2.4.59 and earlier allows request URLs with incorrect encoding to be sent to backend services, potentially bypassing authentication via crafted requests. id: CVE-2024-38473 info: name: Apache HTTP Server - ACL Bypass author: pdteam severity: high...

Apache Tomcat JK Connect <=1.2.44 - Manager Access

Apache Tomcat JK modjk Connector 1.2.0 to 1.2.44 allows specially constructed requests to expose application functionality through the reverse proxy. It is also possible in some configurations for a specially constructed request to bypass the access controls configured in httpd. While there is so...