rathole

rathole English | 简体中文 A secure, stable and high-performance reverse proxy for NAT traversal, written in Rust rathole, like frp and ngrok, can help to expose the service on the device behind the NAT to the Internet, via a server with a public IP. rathole Features Quickstart Configuration Logging...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

CVE-2018-14847

CVE-2018-14847 create global proxy based on RouterOS via CVE-2018-14847 How To Use prepare pip3 install paramiko ipcalc optparse hashlib usage for ip file python3 loop.py -f list.txt for single ip python3 loop.py ip Copyright the poc part in this repository that use CVE-2018-14187 to get...

EUVD-2026-111156

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy...

CVE-2026-93857 Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution

A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to execute arbitrary code by sending a specially crafted request through a policy that uses the SIP proxy...

CVE-2026-93857

A stack-based buffer overflow vulnerability exists in the Fireware OS SIP proxy . A remote, unauthenticated attacker can exploit this by sending a specially crafted request through a policy utilizing the SIP proxy, potentially leading to remote code execution . No specific exploit details or reme...

BounceBack

BounceBack ↕️🤫 Stealth redirector for your red team operation security. Overview BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic...

log4jail

log4jail 🛡️ A fast firewall reverse proxy with TLS HTTPS and swarm support for preventing Log4J Log4Shell aka CVE-2021-44228 attacks. 📖 Table of Contents Introduction Installation Quick Start Proof of Concept For Pentesters ℹ️ Introduction log4jail is a quick and dirty solution to block Log4Shell...

smtp-tunnel-proxy

📧 SMTP Tunnel Proxy A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection DPI firewalls. ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌──────────────┐ │ Application │─────▶│ Client │─────▶│ Server │─────▶│ Internet │ │ Browser │ TCP ...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, or MacOS. You have access to a remote network via ssh. You don't necessarily have admin access on the remote...

GHSA-G5FF-637F-6Q2M LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`

Summary An authenticated LiteLLM proxy user could read arbitrary local files from the proxy runtime by sending a crafted vertexaicredentials value to /utils/transformrequest. The request-body safety blocklist rejected vertexcredentials but missed its alias vertexaicredentials, which let the value...

npm: better-auth: OAuth Proxy lets an attacker sign in as another user

npm: better-auth: OAuth Proxy lets an attacker sign in as another user vulnerability discovered by ? in WordPress npm better-auth versions = 1.5.0-beta.12, 1.7.7...

better-auth: OAuth Proxy lets an attacker sign in as another user

Am I affected? You may be affected if you use better-auth from 1.5.0-beta.12 through versions before 1.7.7 with the OAuth Proxy plugin. You are affected only if all of these are also true: - On a participating environment, the OAuth Proxy plugin has no dedicated secret, or its secret equals that...

GHSA-R4XP-PRCW-77QF better-auth: OAuth Proxy lets an attacker sign in as another user

Am I affected? You may be affected if you use better-auth from 1.5.0-beta.12 through versions before 1.7.7 with the OAuth Proxy plugin. You are affected only if all of these are also true: - On a participating environment, the OAuth Proxy plugin has no dedicated secret, or its secret equals that...

dnscrypt-proxy

Overview A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 including Post-Quantum DNSCrypt DNSCrypt 2026, DNS-over-HTTPS, Anonymized DNSCrypt and ODoH Oblivious DoH. dnscrypt-proxy documentation ← Start here DNSCrypt project home page Discussions...

elite-proxy-finder

elite-proxy-finder This script was not working for a few months. I just fixed it 7/6/15. Only uses gatherproxy.com now. Finds elite anonymity L1 HTTP proxies then tests them all in parallel. Tests each proxy against 3 IP checking URLs including one which is HTTPS to make sure it can handle HTTPS...

NodeGoat

NodeGoat Being lightweight, fast, and scalable, Node.js is becoming a widely adopted platform for developing web applications. This project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how to effectively address them. Getti...

mitmproxy_rs

mitmproxyrs !autofix.ci:...

CollaboratorPlusPlus

CollaboratorPlusPlus Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Corey Arthur, [email protected] http://www.github.com/nccgroup/CollaboratorPlusPlus This project is released under AGPL see LICENSE for more information Download from releases here. Backgrou...

tiktok-scraper

TikTok Scraper & Downloader Scrape and download useful information from TikTok. No login or password are required This is not an official API support and etc. This is just a scraper that is using TikTok Web API to scrape media and related meta information. Content Features To Do Contribution...