632 matches found
bbscope
bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...
CaddySmith
CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...
caddy
a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help...
Caddy 2.4.6 - Open Redirect
Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...
QUIC-attacks
Ataques QUIC CVE-2022-30591 Este repositorio tiene el propósito de compartir los scripts que utilizamos con fines educativos. Estos ataques fueron parte de nuestro estudio consulte aquí y fueron probados contra 6 servidores diferentes compatibles con QUIC IIS, NGINX, LiteSpeed, Cloudflare, H2O y...
RedCaddy
RedCaddy C2 redirector base on caddy Table of content Overview Feature Note Quick start Step by step References Overview Generate caddyfile with c2 malleable profiles Feature Block IP by GEOIP country Allow requests by header matcher User-agent & IP blacklist Support multiple redirection TeamServ...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
PT-2026-80742
Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...
GHSA-F3QQ-49M6-RW8F
creationtimestamp| type| source ---|---|--- 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...
CVE-2026-45135
A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...
GO-2025-4180 vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step, step-ca-fips, caddy-fips, step-fips, step-issuer-fips, caddy, step-ca, step-issuer...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, rancher-webhook-fips, metrics-server-fips, buildkitd, up, kube-oidc-proxy, rancher-webhook, caddy, kubevela, kubernetes-fips, k3s, kubernetes...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step, step-ca-fips, caddy-fips, step-fips, step-issuer-fips, caddy, step-ca, step-issuer...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: gitness, cloudflared, rclone-fips, caddy, tkn, step, step-fips, step-issuer, karma, dapr, kyverno-policy-reporter-ui-fips, sftpgo, step-ca, rclone, gogatekeeper, kyverno-policy-reporter-ui, dapr-fips, telegraf, step-ca-fips, caddy-fips, buf, tkn-fips, step-issuer-fip...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: q, frp, cloudflared, kubernetes-dns-node-cache, spegel, caddy-fips, buf, traefik, caddy, kubernetes-dns-node-cache-fips, eks-distro, traefik-fips, eks-distro-fips, k3s...
GO-2025-4181 vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy...