Egress-Assess

Egress-Assess Egress-Assess is a tool used to test egress data detection capabilities. Setup To set up, run the included setup script, or perform the following: 1. Install pyftpdlib 2. Generate a server certificate and store it as "server.pem" on the same level as Egress-Assess. This can be done...

wafpass

WAFPASS ██╗ ██╗ █████╗ ███████╗██████╗ █████╗ ███████╗███████╗ ██║ ██║██╔══██╗██╔════╝██╔══██╗██╔══██╗██╔════╝██╔════╝ ██║ █╗ ██║███████║█████╗ ██████╔╝███████║███████╗███████╗ ██║███╗██║██╔══██║██╔══╝ ██╔═══╝ ██╔══██║╚════██║╚════██║ ╚███╔███╔╝██║ ██║██║ ██║ ██║ ██║███████║███████║ ╚══╝╚══╝ ╚═╝...

zeek-quasarrat-detector

A Zeek Based QuasarRAT Malware Detector Malware often hides communications with its command and control C2 server over HTTPS. The encryption in HTTPS usually conceals the compromise long enough for the malware to accomplish its goal. This makes detecting malware that uses HTTPS challenging, but...

CVE-2026-46368-OpenWrt-Exploit

OpenWrt luci-app-https-dns-proxy Authenticated Command Injection CVE-2026-46368 This repository contains the Proof of Concept PoC exploit for a critical OS command injection vulnerability in luci-app-https-dns-proxy that results in arbitrary command execution as root. CVE ID: CVE-2026-46368...

proxy2

proxy2 HTTP/HTTPS proxy in a single python script Features easy to customize require no external modules support both of IPv4 and IPv6 support HTTP/1.1 Persistent Connection support dynamic certificate generation for HTTPS intercept This script works on Python 2.7. You need to install OpenSSL to...

vuln-CVE-2022-41082

vuln-CVE-2022-41082 https & http FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

ip-https-tools

ip-https-tools A collection of tools for the IP over HTTPS IP-HTTPS Tunneling Protocol used by Microsoft DirectAccess to send Teredo related IPv6 packets over an IPv4-based HTTPS session. MS-IPHTTPS protocol pecification DirectAccess Technical Overview DirectAccess Requirements DirectAccess...

poc-CVE-2020-5902

PoC for CVE-2020-5902 this just sample PoC to demonstrated the issue Limitation Only scan HTTPS for now, it can be configure to scan HTTP or any custom ports. Usage Proof...

Malware in @s4yhiitestpoc/scan-https-d

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/scan-https-dualuse-e

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/r2-https-dualuse

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @s4yhiitestpoc/r2-https-b

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @s4yhiitestpoc/scan-https-dualuse-e (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc69b9998deea152d8088db89469ab4f8fa468d68e8cb923b25c7e91f8facf04 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @s4yhiitestpoc/r2-https-dualuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06d8987a5408de1fd879005877185e31a5a0931162318ade2fc1a4e6ce6592c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ALSA-2026:90494 Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Important: python-urllib3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Malicious code in @generic-means/ing-feat-scanner-libs (npm)

Source: amazon-inspector 7053eaf141232704108519a3b3e7a0f1197d9eaabfa9fd3f4ff56ae9f753d763 package.json declares its sole dependency ltidisafe as a bare HTTPS tarball URL https://ltidi.storage.googleapis.com/depenconf/ltidisafe-3.9.3.tgz rather than a registry version range or a git ref pinned to ...

CVE-2026-116166

The SiYuan note-taking application (versions 3.6.0 before 3.8.7 ) is vulnerable to cleartext transmission of sensitive information (CWE-319). Although the application accepts and persists the networkServeTLS setting, it fails to enforce it, allowing the kernel port to serve full API access over p...

mitm-proxy-ja3-ja4

mitm-proxy-ja3-ja4 English | Русский An HTTP MITM proxy built with Rust, tokio, and btls. This project has been completely rewritten to leverage btls BoringSSL for advanced TLS fingerprinting capabilities. The TLS fingerprinting layer JA3/JA4 is now fully spoofable — cipher suites, curves,...

https-everywhere

Update on HTTPS Everywhere ⚠️This project is no longer being maintained or updated. Please uninstall and direct users to the advice below to switch to HTTPS by default natively. You no longer need HTTPS Everywhere to set HTTPS by default! Major browsers now offer native support for an HTTPS only...