requests-ip-rotator

Swiftproxy の誇り高きスポンサー 高性能なレジデンシャルプロキシ。80M+ IPプールを195か国以上で展開 — 大規模データ収集やブラウザ自動化におけるリクエスト成功率を向上させ、IPブロックを削減します。requests-ip-rotator、Playwright、Selenium、その他のスクレイピングツールとの併用に最適です。 無料トライアルを開始 → requests-ip-rotator AWS API Gatewayの大規模IPプールをプロキシとして利用し、擬似的な無限IPを生成してWebスクレイピングやブルートフォース攻撃を行うためのPythonライブラリです。...

fireprox

FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...

fireprox

FireProx 개요 이점 면책 조항 관리자 크레딧 기본 사용법 설치 스크린샷 기여 개요 웹 호출 시 소스 IP 주소를 숨기거나 지속적으로 변경하는 것은 어렵거나 비용이 많이 들 수 있습니다. 몇 가지 도구가 오랫동안 존재해 왔지만 IP 주소 수가 제한되어 있거나, 비용이 비싸거나, 많은 VPS를 배포해야 했습니다. FireProx는 AWS API Gateway를 활용하여 매 요청마다 소스 IP 주소를 회전시키는 통과 프록시pass-through proxy를 생성합니다! FireProx를 사용하여 대상 서버를 가리키는 프록시...

IPRotate_Burp_Extension

IPRotateBurpExtension Burp Suite용 확장 프로그램으로, AWS API Gateway를 사용하여 매 요청마다 IP를 변경합니다. 추가 정보: AWS를 이용한 IP 기반 차단 우회 - Rhino Security Labs 참고/경고 AWS API Gateway를 사용하여 소스 IP를 숨기는 이 방법은 현재 AWS 침투 테스트 정책에 따라 금지된 것으로 간주됩니다: https://aws.amazon.com/security/penetration-testing/ 설명 이 확장 프로그램을 사용하면 여러 리전에 걸쳐...

IPSpinner

🔁 IPSpinner IPSpinner는 들어오는 모든 요청을 사용자가 선택한 다양한 공급자를 통해 리디렉션할 수 있는 로컬 프록시입니다. 목적은 각 요청의 소스 IP 주소를 회전시키는 패스스루pass-through 프록시를 만드는 것입니다. 예를 들어, IPSpinner를 통해 무차별 대입bruteforce 공격을 실행하면 서버가 수백 개의 서로 다른 IP 주소에서 요청을 받게 되므로 탐지를 피하는 데 도움이 됩니다. IPSpinner는 현재 AWSAPI Gateway, AzureCloud Shell 및 GitHubGitHu...

Malicious code in eslint-config-compact-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc01e3a8316b2d4e11b34a9c8cbe1cf5bd2af83a6a70052e40a22b54f13f78b index.js executes on module load and collects host reconnaissance data — os.platform, os.hostname, os.userInfo.username, architecture, Node version,...

CVE-2026-94384

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

CVE-2026-94384 Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

CVE-2026-94384 Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

EUVD-2026-84568

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

CVE-2026-94384

The Amazon amazon-connect-salesforce-lambda component (versions before 5.26 ) is vulnerable to privilege escalation due to missing authorization in the sfExecuteAWSService function. This allows any IAM principal with lambda:InvokeFunction permissions to perform restricted AWS API operations becau...

CVE-2026-94384 Missing Authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

CVE-2026-94384: Missing Authorization

Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 allows any IAM principal with lambda:InvokeFunction permission on the affected function to escalate privileges and perform AWS API operations that their own IAM identity is explicitly denied, via invocation of a Lambda...

PT-2026-96855

Name of the Vulnerable Software and Affected Versions Amazon amazon-connect-salesforce-lambda versions prior to 5.26 Description Missing authorization in the Amazon Connect Salesforce integration allows an IAM principal with lambda:InvokeFunction permission to escalate privileges. The...

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

SummaryThe AWS API MCP Server is an open source Model Context Protocol MCP server that enables AI assistants to interact with AWS services and resources through AWS CLI commands. It provides programmatic access to manage your AWS infrastructure while maintaining proper security controls. It...

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

Summary The AWS API MCP Server is an open source Model Context Protocol MCP server that enables AI assistants to interact with AWS services and resources through AWS CLI commands. It provides programmatic access to manage your AWS infrastructure while maintaining proper security controls. It...

CVE-2026-16584

Technical details about CVE-2026-16584 are not publicly available in the provided documents; no affected product/version or remediation details can be confirmed here. Monitor for updates in connected sources.

CVE-2026-16584: Non-exit on Failed Initialization

Improper handling of an initialization failure in AWS API MCP Server from 0.2.13 through 1.3.46 might allow an actor to bypass the user-configured security policy and execute AWS API operations that the policy was set to deny or gate. When initialization of the security policy enforcement data...

CVE-2026-59897: Use of Less Trusted Source

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

CVE-2026-13140: Improper Neutralization of Input During Web Page Generation

Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e...