fireprox

FireProx Обзор Преимущества Отказ от ответственности Мейнтейнер Благодарности Базовое использование Установка Скриншоты Участие в разработке Обзор Возможность скрывать или постоянно менять исходный IP-адрес при выполнении веб-запросов может быть сложной или дорогостоящей. Некоторое время...

ssct

ShadowSocks ConnecTion Инструмент-обёртка для shadowsocks, позволяющий стабильно обходить брандмауэры. Быстрый старт Автоматическое подключение Самый простой способ запустить этот инструмент — просто ввести ssct в терминале. ssct сам найдёт доступные серверы shadowsocks на ishadowsocks и...

ThunderDNS

ThunderDNS Этот инструмент может перенаправлять TCP-трафик через протокол DNS. Поддержка нескомпилированных клиентов и socks5. Запуск Настройка NS-записей для нашего домена: Пожалуйста, дождитесь очистки DNS-кэша. Простой запуск сервера: python3 ./server.py --domain oversec.ru Простой запуск...

proxify

...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter는 OAuth 서명으로 보호된 URL을 실험할 수 있게 해주는 도구입니다. 기능 GET, POST, PUT 및 DELETE 지원 요청 프록시 URL, 매개변수 및 헤더를 실시간으로 변조 추가 헤더 및 쿠키 추가 왜? OAuth 서명으로 보호된 URL을 다룰 때, 요청을 변조하거나 발행하려면 매번 유효한 서명과 nonce로 보호된 매개변수를 생성하기 위해 도구를 사용하고, 성공적인 요청을 위해 이를 프록시에 추가해야 합니다. 모든 단일 요청에 대해 이...

CVE-2021-3019

Lanproxy 디렉토리 트래버설 취약점 CVE-2021-3019 취약점 설명 Lanproxy는 로컬 네트워크의 개인용 컴퓨터와 서버를 공용 네트워크로 프록시하는 내부 네트워크 터널링 도구입니다. TCP 트래픽 전달을 지원하며 모든 TCP 상위 프로토콜내부 네트워크 웹사이트 접속, 로컬 결제 인터페이스 디버깅, SSH 접속, 원격 데스크톱 등을 지원합니다. 이번 Lanproxy 경로 탐색 취약점CVE-2021-3019은 ../를 우회하여 임의 파일을 읽을 수 있습니다. 이 취약점은 디렉토리 탐색을 통해...

ProxySqlMap

ProxySqlMap 프록시에서 SqlMapApi로 사용 방법: config.py 수정: 1. Extfilter는 필터링할 확장자입니다. 2. sqlmap은 SQLmap 주소입니다. 3. url은 가로챌 URL입니다. 4. admintoken은 sqlmap의 adminid입니다. 프록시 설정: 127.0.0.1:8081 지원 라이브러리: 1. requests 2. baseproxy이미 내장되어 있어 설치할 필요가 없습니다 HTTPS 지원: baseproxy.ca에 접속하면 다운로드할 수 있습니다. 출력: sqlsan.txt는...

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Introduction In February 2026, we discovered a set of malicious activities that had been ongoing since late 2025. These activities involved a RAT module written in Go with proxy capabilities, which served as the main stage of the attack. The attack targeted government and diplomatic entities in...

3DP-MANAGER 信任管理问题漏洞

3DP-MANAGER is a proxy tool developed by DenPiligrim’s individual developers. Versions of 3DP-MANAGER 2.0.1 and earlier contained a vulnerability related to trust management. This vulnerability stemmed from the automatic creation of management accounts with known default credentials during the...

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

Meta on Tuesday said it has made available a tool called WhatsApp Research Proxy to some of its long-time bug bounty researchers to help improve the program and more effectively research the messaging platform's network protocol. The idea is to make it easier to delve into WhatsApp-specific...

Claude Code 安全漏洞

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

[SECURITY] Fedora 42 Update: clash-meta-1.19.12-1.fc42

A rule based network proxy tool, also be known as mihomo...

Claude Code 路径遍历漏洞

Claude Code is an open source proxy coding tool from Anthropic. A path traversal vulnerability exists in versions of Claude Code prior to 0.2.111, which stems from path validation using prefix matching instead of canonical path comparison, which could lead to directory restriction bypass...

CVE-2025-52921

In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. This bypasses the initial check that...

CVE-2025-52921

Innoshop up to version 0.4.1 contains a server-side code execution flaw in the File Manager of the admin panel. An authenticated attacker can upload a crafted file and bypass the image-only check by renaming the file to a .php extension (renaming function), enabling a subsequent GET request to ex...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 Jenkins CVE-2024-23897: Arbitrary...

Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

North Korean threat actors are actively exploiting a critical security flaw in JetBrains TeamCity to opportunistically breach vulnerable servers, according to Microsoft. The attacks, which entail the exploitation of CVE-2023-42793 CVSS score: 9.8, have been attributed to Diamond Sleet aka Labyrin...

WhatsApp Launches a Proxy Tool to Fight Internet Censorship

Amid internet shutdowns in Iran, the encrypted messaging app is introducing proxy connections that can help people get online...

Buffalo TeraStation Network Attached Storage (NAS) 1.66 Authentication Bypass

Exploit Title: Buffalo TeraStation Network Attached Storage NAS 1.66 - Authentication Bypass Date: 2022-08-11 Exploit Author: JORDAN GLOVER Type: WEBAPPS Platform: HARDWARE Vendor Homepage: https://www.buffalotech.com/ Model: TeraStation Series Firmware Version: 1.66 Tested on: Windows 10 An...

Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass Vulnerability

Exploit Title: Buffalo TeraStation Network Attached Storage NAS 1.66 - Authentication Bypass Exploit Author: JORDAN GLOVER Type: WEBAPPS Platform: HARDWARE Vendor Homepage: https://www.buffalotech.com/ Model: TeraStation Series Firmware Version: 1.66 Tested on: Windows 10 An authentication bypass...