632 matches found
bbscope
bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...
caddy
a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help...
CaddySmith
CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...
QUIC-attacks
QUIC-атаки CVE-2022-30591 Текущий репозиторий предназначен для обмена скриптами, которые мы использовали в образовательных целях. Эти атаки были частью нашего исследования см. здесь и были протестированы против 6 различных QUIC-серверов IIS, NGINX, LiteSpeed, Cloudflare, H2O и Caddy. Скрипт...
Caddy 2.4.6 - Open Redirect
Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...
RedCaddy
RedCaddy caddy 기반 C2 리다이렉터 목차 개요 기능 참고 빠른 시작 단계별 참조 개요 C2 malleable profile로 caddyfile 생성 기능 GEOIP 국가별 IP 차단 헤더 매처로 요청 허용 User-agent 및 IP 블랙리스트 다중 리다이렉션 지원 TeamServer 포트 워든 참고 modules 아래의 "redwardenparser.py"는mgeeky의 RedWarden에서 가져온 것입니다. 이 문서에서 많은 영감을 얻었습니다: 🇬🇧 Carrying the Tortellini's golf...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
PT-2026-80742
Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...
GHSA-F3QQ-49M6-RW8F
creationtimestamp| type| source ---|---|--- 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...
CVE-2026-45135
A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step-ca-fips, step-ca, step-issuer-fips, step-fips, caddy-fips, step, caddy, step-issuer...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: rancher-webhook, metrics-server-fips, kubernetes-fips, rancher-webhook-fips, k3s, prometheus-adapter, kubernetes, kube-oidc-proxy, caddy, up, kubevela, buildkitd...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: rclone-fips, caddy-fips, caddy, rclone, dapr-fips, step-ca, step-issuer-fips, karma, telegraf, sftpgo, tkn, kyverno-policy-reporter-ui-fips, dapr, gogatekeeper, cloudflared, step-ca-fips, step-fips, kyverno-policy-reporter-ui, buf, step, gitness, tkn-fips, step-issue...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step-ca-fips, step-ca, step-issuer-fips, step-fips, caddy-fips, step, caddy, step-issuer...
GO-2025-4180 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
GO-2025-4181 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: spegel, eks-distro-fips, frp, eks-distro, kubernetes-dns-node-cache-fips, traefik-fips, caddy-fips, k3s, traefik, q, buf, caddy, cloudflared, kubernetes-dns-node-cache...