mitmproxy_rs

mitmproxyrs !autofix.ci:...

SocksOverRDP

Socks Over RDP / Socks Over Citrix Esta herramienta añade la capacidad de un proxy SOCKS a Terminal Services o Servicios de Escritorio Remoto y Citrix XenApp/XenDesktop. Utiliza Dynamic Virtual Channel Canal Virtual Dinámico que nos permite comunicarnos a través de una conexión RDP/Citrix abierta...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. git clone https://github.com/maurosoria/dirsearch.git...

grafana-CVE-2021-43798

Grafana CVE 扫描器 21-43798 0.1 用于扫描 CVE-2021-43798 中发现的 Grafana 路径遍历漏洞的扫描器 免责声明：此工具仅用于教育目的！ CVE 参考资料： 1 - NIST CVE 详情 2 - Grafana 说明 临时解决方案 所有 v8.0.0-beta1 至 v8.3.0 之间的安装版本应尽快升级。 如果无法升级，在 Grafana 前运行一个反向代理来规范化请求的 PATH 将缓解此漏洞。例如，envoy 中的 normalizepath 设置。 得益于我们的纵深防御方法，Grafana Cloud 实例未受此漏洞影响。...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

ladder

Ladder Ladder es un proxy web http. 简体中文 Ladder es una herramienta para desarrolladores diseñada para probar y analizar implementaciones de paywalls y el comportamiento de entrega de contenido en sitios web modernos. Permite a desarrolladores, investigadores y editores simular diferentes entornos...

OnionHop

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

CVE-2022-22947

Introduction Inject Godzilla memory shell via CVE-2022-22947. Since the tools I found didn't have proxy functionality, I built my own wheel. Usage main -u http://127.0.0.1:8080 Using proxy main -u http://127.0.0.1:8080 -p http://10.0.0.1:8080 Reference...

PwnAdventure3

PwnAdventure3 Welcome to Pwnie Island! Pwn Adventure 3: Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more a...

privaxy

Privaxy Next generation tracker and advertisement blocker About Privaxy is a MITM HTTPs proxy that sits in between HTTPs talking applications, such as a web browser and HTTP servers, such as those serving websites. By establishing a two-way tunnel between both ends, Privaxy is able to block netwo...

stunner

STUNNER Stunner is a tool to test and exploit STUN, TURN and TURN over TCP servers. TURN is a protocol mostly used in videoconferencing and audio chats WebRTC. If you find a misconfigured server you can use this tool to open a local socks proxy that relays all traffic via the TURN protocol into t...

stunner

STUNNER Stunner 是一个用于测试和利用 STUN、TURN 以及基于 TCP 的 TURN 服务器的工具。 TURN 是一种主要用于视频会议和音频聊天（WebRTC）的协议。 如果你发现一个配置错误的服务器，你可以使用此工具打开一个本地 SOCKS 代理，该代理通过 TURN 协议将所有流量中继到服务器背后的内部网络中。 我在测试 Cisco Expressway 期间开发了这个工具，并发现了一些漏洞：https://firefart.at/post/multiplevulnerabilitiesciscoexpressway/...

CVE-2024-0311

CVE-2024-0311 ? This is a PoC for what I believe is CVE-2024-0311, SB10418. A malicious insider can bypass the existing policy of Skyhigh Client Proxy without a valid release code. Much details. Very exploit. ¯\ツ /¯ The PoC injects into a user-ran SCPBypass.exe process and writes to the...

hetty

Hetty 是一个用于安全研究的 HTTP 工具包。它旨在成为商业软件（如 Burp Suite Pro）的开源替代品，提供针对信息安全与漏洞赏金社区需求量身定制的强大功能。 功能特性 中间人（MITM）HTTP 代理，支持日志记录与高级搜索 HTTP 客户端，用于手动创建/编辑请求，并重放代理请求 拦截请求与响应以进行人工审查（编辑、发送/接收、取消） 作用域支持，帮助保持工作有序 易于使用的基于 Web 的管理界面 基于项目的数据库存储，帮助保持工作有序 👷‍♂️ Hetty 正在积极开发中。请查看 待办事项清单了解当前状态。 📣 您是否以团队形式进行专业渗透测试？我非常想通过这份 5...

hetty

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Machine-in-the-middle MITM HTTP proxy, with logs and advanced...

striptls

striptls - 审计代理 STARTTLS 剥离攻击的概念验证实现 一个通用的 TCP 代理实现和审计工具 ，用于执行 协议无关 的 ssl/tls 拦截以及针对 SMTP、POP3、IMAP、FTP、NNTP、XMPP、ACAP 和 IRC 的 STARTTLS 剥离攻击。 Python2! 🏆 战利品 CVE-2016-0772 - python: smtplib CVE-2016-10027 - Smack XMPP 库 //使用本项目发现了漏洞？欢迎与我联系！ 要求： Python = 2.7.9（SSLContext） Python 3 （可选，用于 TLS 拦截）PEM...

festin

FestIN the powered S3 bucket finder and content discover What is FestIn Why Festin Install Using Python Using Docker Full options Usage Configure search domains Concurrency HTTP Crawling configuration Manage results Proxy usage DNS Options Full Text Support Running as a service or watching mode...

proxify

Features • Installation • Usage • Running Proxify • Installing SSL Certificate • Applications of Proxify • Join Discord Swiss Army Knife Proxy for rapid deployments. Supports multiple operations such as request/response dump, filtering and manipulation via DSL language, upstream HTTP/Socks5 proxy...

proxify

特征 • 安装 • 用法 • 运行 Proxify • 安装 SSL 证书 • Proxify 的应用 • 加入 Discord 瑞士军刀式代理，用于快速部署。支持多种操作，如请求/响应转储、通过 DSL 语言进行过滤和操纵，以及上游 HTTP/Socks5 代理。 此外，重放工具允许将转储的流量（具有正确域名的请求/响应）导入 BurpSuite 或任何其他代理，只需将上游代理设置为 proxify 即可。 特征 拦截/操纵 HTTP/HTTPS 和 非 HTTP 流量 隐形和厚客户端 流量代理支持 使用客户端/服务器证书的 TLS MITM 支持 上游代理的 HTTP 和 SOCKS...

CVE-2026-106491

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...