IPRotate_Burp_Extension

IPRotateBurpExtension Burp Suite用の拡張機能で、AWS API Gatewayを使用してリクエストごとにIPを変更します。 詳細情報: AWSを使用したIPベースのブロックの回避 - Rhino Security Labs 注意/警告 AWS API Gatewayを使用して送信元IPを隠蔽するこの方法は、現在AWSのペネトレーションテストポリシーに従って禁止されているとみなされています: https://aws.amazon.com/security/penetration-testing/ 説明 この拡張機能を使用すると、複数のリージョンに簡単にAPI...

requests-ip-rotator

Fièrement sponsorisé par Swiftproxy Proxies résidentiels haute performance avec un pool de plus de 80M d'IP dans plus de 195 pays — améliorez les taux de réussite des requêtes et réduisez les blocages IP lors de la collecte de données à grande échelle et de l'automatisation de navigateurs. Parfai...

fireprox

FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...

fireprox

FireProx Aperçu Avantages Avis de non-responsabilité Mainteneur Crédits Utilisation de base Installation Captures d’écran Contribuer Overview Être capable de masquer ou de faire tourner continuellement l'adresse IP source lors d'appels web peut être difficile ou coûteux. Un certain nombre d'outil...

IPSpinner

🔁 IPSpinner IPSpinner est un proxy local qui peut être utilisé pour rediriger toutes les requêtes entrantes via différents fournisseurs choisis. L'objectif est de créer un proxy de transit qui fait varier l'adresse IP source de chaque requête. Par exemple, lancer une opération de force brute via...

CVE-2021-37580

Apache ShenYu Admin expose une vulnérabilité de contournement d'authentification. Un attaquant peut contourner l'authentification sécurisée JSON Web Token JWT via cette vulnérabilité et accéder directement au backend du système. Apache ShenYu est une solution de passerelle API extensible, hautes...

poro

poro Description Scan for publicly accessible assets on your AWS environment Services covered by this tool: AWS ELB API Gateway S3 Buckets RDS Databases EC2 instances Redshift Databases Poro also check if a tag you specify is applied to identified public resources using --tag-key and --tag-value...

CVE-2020-13945-EXPLOIT

CVE-2020-13945 - Apache APISIX Exécution de code à distance RCE Ce dépôt contient un exploit de preuve de concept PoC pour une vulnérabilité dans Apache APISIX. La vulnérabilité survient lorsque l'API Admin est activée et que les règles de restriction d'accès par IP sont supprimées, permettant au...

westone-CVE-2021-37580-scanner

westone-CVE-2021-37580-scanner Apache Shenyu est une solution de passerelle API extensible, haute performance et réactive, applicable à tous les scénarios de microservices. Une vulnérabilité de contournement d'authentification existe dans l'admin Apache Shenyu. L'utilisation inappropriée de JWT...

PT-2026-70269

Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys issued to tenants are exchanged for upstream requests made with shared provider accounts ChatGPT/Codex OAuth, OpenAI platform keys, or an...

CVE-2026-18248 @fastify/aws-lambda vulnerable to Lambda event spoofing via client-controlled x-apigateway-event header

@fastify/aws-lambda version 6.4.0 decorates each Fastify request with request.awsLambda.event and request.awsLambda.context, values that applications are documented to use for authorization decisions such as reading API Gateway authorizer claims. In the default configuration, the getter that...

CVE-2026-18248

CVE-2026-18248 affects @fastify/aws-lambda 6.4.0, where request.awsLambda.event and request.awsLambda.context are decorated using client-controlled x-apigateway-event and x-apigateway-context headers. The getter may read untrusted headers before the internal per-invocation token, leaving reserved...

CVE-2026-59897

A flaw was found in Hono, a web application framework. The AWS API Gateway v1 adapter incorrectly de-duplicates repeated request header values using a substring comparison, rather than an exact match. This can lead to incomplete data being received by middleware or application logic that relies o...

GHSA-XGM2-5F3F-MVVC Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

Summary The AWS API Gateway v1 adapter can drop a distinct repeated request header value. When a header appears multiple times, the adapter de-duplicates values using a substring comparison instead of an exact match, so a value that is a substring of another value of the same header is omitted fo...

CVE-2026-44342

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 0.12.0-alpha.1, the email and WeChat account binding endpoints GET /api/oauth/email/bind and GET /api/oauth/wechat/bind used GET requests for state-changing account operations, allowing a...

EUVD-2026-42749

New API is a large language mode LLM gateway and artificial intelligence AI asset management system. Prior to 0.12.0-alpha.1, the default SSRF protection configuration did not apply IP filtering to hostnames; with ApplyIPFilterForDomain disabled by default, URL validation checked domain allow/blo...

Use of Less Trusted Source

Overview hono is an Ultrafast web framework for the Edges Affected versions of this package are vulnerable to Use of Less Trusted Source through the getHeaders processing in the AWS API Gateway v1 EventV1Processor and the Lattice LatticeV2Processor. An attacker can cause a repeated header value t...

CVE-2026-59897

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

CVE-2026-59897 Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

CVE-2026-59897 Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...