agent-vault

Proxy de credenciales HTTP y bóveda Un gestor de credenciales de código abierto de Infisical que se sitúa entre tus agentes y las API que llaman. Los agentes no deberían poseer credenciales. Agent Vault elimina el riesgo de exfiltración de credenciales con acceso intermediado. ¿Nuevo aquí?...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: root@kitploit: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.co...

ladder

Ladder Ladder is a http web proxy. 简体中文 Ladder is a developer tool for testing and analyzing paywall implementations and content delivery behavior on modern websites. It allows developers, researchers, and publishers to simulate different client environments such as browsers and crawlers and...

multitor

multitor Crea múltiples instancias de TOR con balanceo de carga. Descripción • Introducción • Cómo usar • Parámetros • Requisitos • Docker • Otros • Licencia • Wiki Descripción Proporciona un único endpoint para los clientes. Soporta el protocolo HAProxy , socks y servidores http-proxy : polipo ,...

Prox-Ez

Prox-Ez: The Swiss Army Knife of HTTP auth This HTTP proxy handles all HTTP authentications on your behalf. It supports NTLM EPA channel binding and service binding, kerberos, pass-the-hash, overpass-the-hash pass-the-key and pass-the-ticket TGT and TGS. Related articles: Dissecting NTLM EPA with...

dirsearch

dirsearch - Web Path Discovery An advanced web path brute-forcer dirsearch is being actively developed by @maurosoria and @shelld3v. Join the Discord server to communicate with the team. Quick Start dirsearch requires Python 3.11 or higher. root@kitploit: git clone...

mitm-proxy

Go MITM Proxy A lightweight, developer-friendly Man‑in‑the‑Middle MITM HTTP/HTTPS proxy written in Go. It supports HTTP/1.1 and HTTP/2, CONNECT tunneling, WebSocket tunneling ws/wss, on‑disk response caching with flexible filters, and live config reloading. Badges Admin Dashboard Preview Overview...

go-http-proxy-to-socks

GoHPTS - Proxy transparente HTTPS y TCP/UDP a proxys SOCKS4/SOCKS5 cadena escrito en Go...

toolbox

-Significant%20AI%2C%20fully%20reviewed-1f77b4 Herramientas de pruebas de seguridad de aplicaciones basadas en MCP para tu agente de codificación. No es un escáner, sino un banco de trabajo colaborativo. Los agentes tienen dificultades con la interfaz de usuario y las API con estado; tú eres buen...

wpbf

wpbf! wpbf is a bruteforce tool to remotely test password strength, username enumeration and plugin detection on a WordPress site. Description ^^^^^^^^^^^ The script will try to login into the WordPress dashboard through the login form using a mixture of enumerated usernames, a wordlist and...

flareprox

FlareProx 🔥 Simple IP Rotation & URL Redirection via Cloudflare Workers FlareProx automatically deploys HTTP proxy endpoints on Cloudflare Workers for easy redirection of all traffic to any URL you specify. It supports all HTTP methods GET, POST, PUT, DELETE, etc. and provides IP masking through...

ABPTTS

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...

traefik-CVE-2024-45410-poc

Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...

thats_no_pipe

Thats no pipe Frida-based project to intercept Windows named pipe communication Objectives This project aims at intercepting IPC communications by hooking specific WinAPI functions and forwarding them to an HTTP proxy using a websocket. Architecture Read from and write to a named pipe can happen ...

proxify

...

socksmon

socksmon Monitor arbitrary TCP traffic using your HTTP interception proxy of choice What is socksmon? socksmon is a SOCKSv4 server based on Twisted, that tunnels incoming TCP traffic through an HTTP proxy. socksmon does this by starting an internal webserver on port 2357, posts the traffic to usi...

hyperfox

Hyperfox Hyperfox es una herramienta de auditoría de seguridad que proxy y registra el tráfico HTTP y HTTPS entre dos puntos. Instalación Puedes instalar la última versión de hyperfox en /usr/local/bin con el siguiente comando requiere privilegios de administrador: root@kitploit: curl -sL...

EUVD-2026-65228

NLTK: pathsec SSRF protection can be bypassed when a proxy is configured...

ProxyBroker

ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...