cloudbunny

CloudBunny CloudBunny es una herramienta para capturar el servidor de origen que utiliza un WAF como proxy o protección. Puedes leer más sobre la herramienta aquí: https://tinyurl.com/y8p48wb3 Cómo funciona En esta herramienta utilizamos tres motores de búsqueda para buscar información de dominio...

CF-Hero

CF-Hero CF-Hero ¿Qué es? • Características • Antecedentes • Instalación • Uso • Ejecutar cf-hero • ZoomEye Patrocinador • Por hacer ¿Qué es? CF-Hero es una herramienta integral de reconocimiento desarrollada para descubrir las direcciones IP reales de aplicaciones web protegidas por Cloudflare...

CloudFlair

CloudFlair Nota importante: A partir de finales de 2024, Censys ya no proporciona acceso a la API para cuentas gratuitas. Esto significa que CloudFlair ya no funciona con cuentas gratuitas de Censys. CloudFlair es una herramienta para encontrar servidores de origen de sitios web protegidos por...

bypass-firewalls-by-DNS-history

Bypass firewalls abusando del historial de DNS Este script intentará encontrar: la dirección IP directa de un servidor detrás de un firewall como Cloudflare, Incapsula, SUCURI ... un servidor antiguo que aún ejecuta el mismo sitio web inactivo y sin mantenimiento, que no recibe tráfico activo...

Cloudmare

Cloudmare Cloudmare 是一款简单工具，用于发现受 Cloudflare、Sucuri 或 Incapsula 保护且 DNS 配置错误的网站的原始服务器。 关于此常见配置错误及 Cloudmare 工作原理的更多详情，请私信我。 以下是 Cloudmare 的实际运行效果。 此示例中的网站和 IP 地址已做模糊处理 设置 1. 克隆仓库 git clone https://github.com/MrH0wl/Cloudmare.git 2. 进入文件夹 cd Cloudmare python Cloudmare.py -h or python Cloudmare.py...

Astra Linux – Vulnerability in Apache2

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded- headers to the origin server based on the client-side Connection header hop-by-hop mechanism. This could be used to bypass IP-based authentication on the origin server/application...

Astra Linux – Vulnerability in Apache2

The Apache HTTP Server versions 2.4.6 to 2.4.46, with the modproxywstunnel module configured, were used to handle a URL. The origin server did not necessarily upgrade this connection. This setup allowed subsequent requests on the same connection to be processed without any HTTP validation,...

Astra Linux – Vulnerability in Apache2

A properly crafted request URI-path can cause modproxy to forward the request to an origin server chosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier...

CVE-2026-18408

A vulnerability in PostgreSQL allows a malicious origin-server superuser to achieve client-side arbitrary code execution during a database restore. By injecting untrusted data into a pgdump export, the attacker can exploit the input expansion of the psql \restrict meta-command. When a victim...

CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

Cybersecurity researchers have disclosed two denial-of-service DoS attacks that exploit how major content delivery networks CDNs convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin serve...

Linux Distros Unpatched Vulnerability : CVE-2026-67339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy...

EUVD-2026-51854

guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...

PT-2026-67319

Name of the Vulnerable Software and Affected Versions guzzlehttp/guzzle versions prior to 7.14.2 Description The built-in cURL handlers CurlHandler and CurlMultiHandler fail to properly isolate Proxy-Authorization headers from origin servers. This occurs because the handlers place first-class...

CVE-2026-44487

Axios Node.js HTTP adapter vulnerability: Proxy-Authorization credentials can leak to the redirected origin during specific proxy-to-direct redirects. Affected in Axios < 0.32.0 and

CVE-2026-44487 Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is...

Your Origin Server Might Be Your Most Expensive Decision

...

GHSA-P92Q-9VQR-4J8V Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

Summary Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct redirect flows. This affects Node.js usage, where an initial HTTP request is sent through an authenticated HTTP proxy, redirects are followed, and the redirected UR...

CVE-2026-26365

Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Connection: Transfer-Encoding" could result in a forward request with invalid message framing, depending on the Akamai processing pat...

Cloudflare Fixes ACME Validation Bug Allowing WAF Bypass to Origin Servers

Cloudflare has addressed a security vulnerability impacting its Automatic Certificate Management Environment ACME validation logic that made it possible to bypass security controls and access origin servers. "The vulnerability was rooted in how our edge network processed requests destined for the...

curl: Proxy-Authorization header is leaked to origin server after redirect from proxied to direct connection

Summary curl leaks the Proxy-Authorization header to the origin server after following an HTTP redirect that transitions from a proxied connection to a direct connection e.g. when using --noproxy or when proxy is bypassed after redirect. This causes proxy credentials which are hop-by-hop to be se...