reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

goproxy

GoProxy GoProxy ist eine Bibliothek zur Erstellung eines angepassten HTTP/HTTPS-Proxy-Servers mit Go auch Golang genannt und mehreren konfigurierbaren Einstellungen. Das Ziel dieses Projekts ist es, einen optimierten Proxy-Server anzubieten, der bei einer angemessenen Menge an Datenverkehr nutzba...

nextdns

NextDNS CLI-Client NextDNS CLI ist ein Kommandozeilenwerkzeug, mit dem du den DNS-over-HTTPS-Dienst DoH von NextDNS mit erweiterten Funktionen nutzen kannst. Obwohl die fortschrittlichsten Funktionen nur mit NextDNS funktionieren, kann dieses Programm als Client für jeden DoH-Anbieter oder eine...

httprobe

httprobe Take a list of domains and probe for working http and https servers. Install root@kitploit: ▶ go install github.com/tomnomnom/httprobe@latest Basic Usage httprobe accepts line-delimited domains on stdin: root@kitploit: ▶ cat recon/example/domains.txt example.com example.edu example.net ▶...

CVE-2026-50288

CVE-2026-50288 affects @asymmetric-effort/specifyjs , a declarative TypeScript UI framework, prior to version 0.2.136 . The vulnerability resides in the assertSecureUrl function (core/src/shared/secure-fetch.ts:42-45). When new URL() throws a parse error, the catch block silently returned instead...

CVE-2026-50288 @asymmetric-effort/specifyjs: URL parse failure silently allows request

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now...

CVE-2026-50288 @asymmetric-effort/specifyjs: URL parse failure silently allows request

SpecifyJS is a declarative TypeScript user interface framework. Prior to version 0.2.136, when new URL throws a parse error, the assertSecureUrl function returned without throwing, silently allowing the request to proceed without HTTPS validation. Starting in version 0.2.136, the catch block now...

zoshrinkC2

MeliziaC2 Malware mirato via DNS over HTTPS viene eseguito solo una volta ! Alcune funzioni non sono ancora disponibili ! ! WIP, non usare in produzione ! Caratteristiche principali Auto-eliminazione del malware in caso di errore Comunicazione DoH DNS-over-HTTPS completamente crittografata chiave...

https-everywhere

Aggiornamento su HTTPS Everywhere ⚠️Questo progetto non è più mantenuto o aggiornato. Disinstalla e indirizza gli utenti al consiglio qui sotto per passare a HTTPS per impostazione predefinita in modo nativo. Non hai più bisogno di HTTPS Everywhere per impostare HTTPS come predefinito! I browser...

mitmengine

MITMEngine AVVISO DI DEPRECAZIONE: Questo software non è più mantenuto. L'obiettivo di questo progetto è consentire un rilevamento accurato dell'intercettazione HTTPS e un robusto fingerprinting TLS. Questo progetto si basa su The Security Impact of HTTPS Interception ed è nato come porting in Go...

ca-clone

Script di Clonazione CA Script per clonare certificati CA da utilizzare in attacchi client HTTPS. Attualmente include script per clonare una CA root Comodo e una CA Digicert, entrambe abbastanza ampiamente considerate affidabili nei dispositivi IoT. Utilizzo Esegui uno dei due script in loco per...

PacketPirate

PacketPirate Ein headless, skriptbarer, kommandozeilenbasierter MITM-Proxy, der für Netzwerkverkehr-Abfangen, -Analyse und -Modifikation auf Windows-Systemen entwickelt wurde. Er funktioniert ähnlich wie branchenübliche GUI-Proxys, ist jedoch für Automatisierungsumgebungen, Headless-Betrieb und d...

ip-https-tools

ip-https-tools Una raccolta di strumenti per il protocollo di tunneling IP su HTTPS IP-HTTPS utilizzato da Microsoft DirectAccess per inviare pacchetti IPv6 relativi a Teredo su una sessione HTTPS basata su IPv4. MS-IPHTTPS specifica del protocollo Panoramica tecnica di DirectAccess Requisiti di...

NSEC3-X

DISCLAIMER: Questo progetto è stato generato da Intelligenza Artificiale AI ma ha subito un rigoroso processo "Human-in-the-Loop" HITL. Ciò significa che il codice è stato revisionato e rifattorizzato da un ingegnere del software umano, la progettazione architetturale è stata diretta dall'uomo, e...

CVE-2026-70743

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial...

EUVD-2026-61825

Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion component: Access and security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows high privileged attacker with network access via HTTPS to compromise Oracle...

EUVD-2026-61654

Vulnerability in the Oracle Payments product of Oracle E-Business Suite component: File Transmission. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Payments. Successful...

EUVD-2026-61222

fastify is a fast and low overhead web framework for Node.js. Impact: the fix for CVE-2026-3635 added a guard on the forwarded-header reads used to derive the request host, protocol, hostname, ip, and ips values, checking the connecting address. That guard closes the IP, CIDR, and custom-function...

PT-2026-77311

fastify is a fast and low overhead web framework for Node.js. Impact: the fix for CVE-2026-3635 added a guard on the forwarded-header reads used to derive the request host, protocol, hostname, ip, and ips values, checking the connecting address. That guard closes the IP, CIDR, and custom-function...

PT-2026-77742

Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion component: Server. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Hyperion Financial...