mcpsafetywarden

MCP safety warden 是一个代理服务器，它包装任何 MCP 服务器，并为其工具添加行为分析、安全扫描、风险门控和安全执行。 目录 概述 前提条件 安装 配置 MCP 集成 CLI 参考 辅助安全工具集成 开发 测试 进一步阅读 !IMPORTANT MCP 安全是一个活跃的研究领域。最近的调查列举了许多特定于协议的威胁类别，涵盖工具投毒、提示注入、rug-pull 攻击、供应链破坏、凭据泄露以及整个服务器生命周期中的组合攻击。参见 保护 MCP OpenReview，现状与威胁 arXiv，当 MCP 服务器攻击 arXiv，以及 MCP...

proxy.py

!Python 3.xhttps://img.shields.io/static/v1?label=Python&message=3.6%20%7C%203.7%20%7C%203.8%20%7C%203.9%20%...

crawpy

Crawpy Yet another content discovery tool written in python. What makes this tool different than others: Sends asynchronous HTTP requests, fast Calibration mode, applies filters on its own Recursive scan mode with additional flags Report generation, you can later go and check your results Multipl...

socks5

socks5 Socks5/Socks5h 服务器和客户端 该项目是为 Bridge 添加协议支持，也可单独使用 用法 API 文档 示例 支持 CONNECT 命令 支持 BIND 命令 支持 ASSOCIATE 命令 许可证 根据 MIT 许可证授权。完整的许可证文本请参见 LICENSE。...

goproxy

GoProxy GoProxy 是一个使用 Go（又称 Golang）编写的库，用于创建定制的 HTTP/HTTPS代理服务器，并提供多种可配置设置。 该项目的目标是提供一个优化过的代理服务器，能够在合理流量下使用，同时又可定制且可编程。 代理本身就是一个 net/http 处理器，因此您可以在它之上添加多个中间件（panic 恢复、日志记录、压缩等）。它可以轻松地与任何其他 HTTP 网络库集成。 要使用 goproxy，需要将浏览器（或任何其他客户端）设置为使用 goproxy 作为 HTTP 代理。 以下是在 Chrome 和 Firefox 中的设置方法。 如果您决定从 base...

reconerator

Overview This is a custom .NET assembly which will perform a number of situational awareness activities. There are a number of current featuresets: BASIC - Obtains information from the disk and registry. LDAP - Allows customised AD LDAP queries to be made. RESOLVEHOST - Performs DNS lookup querie...

ritm

Ruby In The Middle HTTP/HTTPS interception proxy Ruby in the middle RITM is an HTTP/HTTPS interception proxy with on-the-fly certificate generation and signing, which leaves the user with the full power of the Ruby language to intercept and even modify requests and responses as she pleases...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求所有被恐怖组织哈马斯劫持为人质的公民安全返回。在所有被扣押人员获释并安全回家之前，我们不会罢休。你可以帮助他们回家。https://stories.bringthemhomenow.net/ 该脚本旨在利用SOCKS代理服务器中的漏洞。它构造一个恶意的HTTP响应，当发送到目标SOCKS服务器时，可以在系统上执行任意命令。...

ssct

ShadowSocks ConnecTion A wrapper tool for shadowsocks to consistently bypass firewalls. Quick start Automatically connect The easiest way to run this tool is just type ssct in terminal, and ssct will acquire available shadowsocks servers from ishadowsocks and connect to it automatically. Connect ...

threat-intel-brief-cve-2026-42208-litellm

Informe de Inteligencia de Amenazas - CVE-2026-42208: Inyección SQL en BerriAI LiteLLM CVE: CVE-2026-42208 GHSA: GHSA-r75f-5x8p-qvmc Puntuación CVSS: 9.3 Crítica Software afectado: BerriAI LiteLLM versiones = 1.81.16, 1.83.7 Versión corregida: 1.83.7-stable publicada el 19 de abril de 2026 Añadid...

CVE-2026-84377

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

CVE-2026-84377

LiteLLM (an AI Gateway/proxy server for LLM APIs) is affected by an authenticated SSRF and provider-credential exfiltration vulnerability prior to versions 1.88.6 and 1.96.2 . The root cause lies in incomplete request validation across multiple proxy files (auth_utils.py, common_request_processin...

CVE-2026-84377 LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters

LiteLLM is a proxy server AI Gateway to call LLM APIs in OpenAI or native format. Prior to versions 1.88.6 and 1.96.2, any authenticated LiteLLM proxy user could redirect an outbound provider call to a destination the user controls and cause the proxy to send its configured provider credentials t...

test-cve-2025-29927

用于利用 CVE-2025-29927 的测试应用 该 NextJS 应用具有基于 cookie 的身份验证和一个中间件，以防止未经授权访问 /admin 页面。 启动应用，运行 root@kitploit: yarn then yarn dev 要利用 CVE-2025-29927 漏洞获取对 /admin 页面的未授权访问，运行一个代理服务器，该服务器向请求添加特殊标头。 root@kitploit: node scripts/proxy.js 然后访问 http://localhost:8000/admin...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

A flaw was found in Netty. The HttpProxyHandler component, which handles HTTP CONNECT requests, does not properly validate user-provided outbound headers. This allows an attacker to inject arbitrary HTTP headers into the CONNECT request sent to the proxy server. This could lead to unexpected...

CVE-2026-71192

A flaw was found in the S3API middleware of OpenStack Swift. When configured with s3acl=true non-default, Swift-native control headers such as X-Copy-From and X-Copy-From-Account are not sanitized from S3 API requests. Because the S3 ACL mode bypasses Swift's native authorization, an authenticate...

CVE-2026-71310

A flaw was found in rclone. A remote attacker, by controlling a malicious or compromised proxy server or acting as an on-path attacker for a plaintext HTTP proxy connection, could send oversized HTTP CONNECT response headers. The rclone application's HTTP CONNECT helper processes these responses...

CVE-2026-71190

In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...

CVE-2026-71190

OpenStack Swift proxy server vulnerability CVE-2026-71190 affects Swift up to 2.38.0. The proxy Accept header parser uses a qdtext pattern (?:[^"]|\.)* that allows catastrophic backtracking (ReDoS). An unauthenticated remote attacker can craft an Accept header to trigger exponential CPU usage, wh...