67 matches found
http-garden
The HTTP Garden HTTP Garden은 구성 가능하도록 설계된 HTTP 서버와 프록시 모음으로, 취약점을 훨씬 쉽게 찾을 수 있는 방식으로 이들과 상호작용하는 스크립트를 함께 제공합니다. HTTP Garden으로 찾을 수 있는 취약점에 대한 멋진 데모를 보려면 ShmooCon 2024 발표를 확인하세요. Acknowledgements 이 프로젝트를 가능하게 해 주신 Galois, Trail of Bits, Narf Industries, Dartmouth College의 친구들에게 감사드립니다. 이 자료는 계약 번호...
elite-proxy-finder
elite-proxy-finder このスクリプトは数ヶ月間動作していませんでした。7/6/15 に修正しました。現在は gatherproxy.com のみを使用します。 エリート匿名性（L1）HTTPプロキシを探し出し、それらすべてを並列でテストします。各プロキシを3つのIPチェックURL（HTTPS対応を確認するためのHTTPS...
fireprox
FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...
CVE-2026-13316
Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
PT-2026-53837
A flaw has been found in foreman when HTTP parameters are modified in http proxies controller and http proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
[SECURITY] Fedora 43 Update: proxychains-ng-4.17-8.fc43
ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...
[SECURITY] Fedora 42 Update: proxychains-ng-4.17-8.fc42
ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...
SOAPwn: Pwning .NET Framework Applications through HTTP Client Proxies and WSDL
This is a whitepaper which supplements the BlackHat Europe 2025 presentation called "SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies and WSDL". In this whitepaper, the author presents new exploitation sinks in .NET Framework, which may allow an attacker to achieve either...
EUVD-2005-1859
Malware in sbrugna...
EUVD-2016-5628
Malware in sbrugna...
EUVD-2022-41319
Malicious code in bioql PyPI...
EUVD-2024-51141
Malicious code in bioql PyPI...
RCE-Foryou
RCE-Foryou Python tool for safely testing and exploiting RCE v...
HTTP Request Smuggling (HRS)
webrick is vulnerable to HTTP Request Smuggling. The vulnerability is due to inconsistent parsing of HTTP header terminators in the readheaders method, which allows attackers to smuggle arbitrary HTTP requests when deployed behind certain HTTP proxies...
CVE-2022-38756
A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies...
CVE-2025-4948
A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...