filtron

Filtron Proxy HTTP inverso para filtrar solicitudes según diferentes reglas. Se puede usar entre el servidor web de producción y el servidor de aplicaciones para evitar abusos del backend de la aplicación. El propósito original de este programa era defender searx, pero puede usarse para proteger...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

CVE-2026-102164

Affected Arista access points are vulnerable when configured with VXLAN tunnelling and L2-proxy (specifically for the VESPA use-case ). A wireless client associated with the tunnelled SSID can send a crafted packet, triggering an out-of-bounds read (CWE-125) that causes the access point to reveal...

CVE-2026-102164 Security Advisory 0196

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

CVE-2026-102164 Security Advisory 0196

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

EUVD-2026-93966

On affected Arista access points configured with VXLAN tunnelling and L2-proxy a specific configuration unique to the VESPA use-case, a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal memory contents in network traffic. No write...

CVE-2026-102161 Security Advisory 0190

An unauthenticated attacker located on an adjacent private network or any attacker routed through a reverse proxy/load balancer that forwards client headers can forge their source IP address and gain administrative session privileges on the CV-CUE backend...

TREVORproxy

TREVORproxy Un proxy SOCKS escrito en Python que aleatoriza tu dirección IP de origen. Distribuye tus paquetes malvados en round-robin a través de túneles SSH o ¡dales miles de millones de direcciones IP únicas! Consulta el Blog Post adjunto para una divertida charla y algunas demostraciones...

certPinningVulnerableOkHttp

OkHttp simple-client app vulnerable to CVE-2016-2402 This is a fork of the default simple-client from the okhttp project. Simple-client is a Java app that just does a GET request to https://api.github.com and fetches the names of okhttp's contributors. This fork has been edited so that OkHttp 3.0...

zaproxy

El Zed Attack Proxy ZAP de Checkmarx es el escáner de aplicaciones web más utilizado del mundo. Gratuito y de código abierto. Un proyecto comunitario del Top 1000 de GitHub al que cualquiera puede contribuir. Puede ayudarte a encontrar automáticamente...

reGeorg

reGeorg | | | | | || | || |/ | | | | | \ | || | | || || || \ | | | ||\|||| |||/||\|| || ... every office needs a tool like Georg [email protected] / @wm [email protected] / @trowalts [email protected] / @kampstaaldraad Versión 1.0 Dependencias reGeorg requiere Python 2.7 y los...

ProxyLogon

ProxyLogon ProxyLogon es el nombre genérico formal para CVE-2021-26855, una vulnerabilidad en Microsoft Exchange Server que permite a un atacante eludir la autenticación y hacerse pasar por el administrador. También hemos encadenado este error con otra vulnerabilidad posterior a la autenticación ...

anonym8

@HiroshimanRise anonym8 Amigo de la Privacidad Proxy Transparente a través de TOR, I2P, Privoxy, Polipo y modificar DNS, para una privacidad y seguridad simples y mejores; Incluye funciones de Anonymizing Relay Monitor arm, macchanger, hostname y wipe limpia RAM/caché y espacio de intercambio...

xssless

xssless An automated XSS payload generator written in python. Usage 1. Record requests with Burp proxy 2. Select requests you want to generate, then right click and select "Save items" 3. Use xssless to generate your payload: ./xssless.py burpexportfile 4. Pwn! A more detailed tutorial can be fou...

xssless

xssless 一款基于 Python 的自动化 XSS 载荷生成器。 用法 1. 使用 Burp 代理 记录请求 2. 选择要生成的请求，右键点击并选择 "Save items" 3. 使用 xssless 生成载荷：./xssless.py burpexportfile 4. 搞定！ 更详细的教程请参见此处 功能特性 从导入的 Burp 代理请求自动生成 XSS 载荷 载荷完全异步，不会冻结用户浏览器 载荷已优化，但建议使用第三方工具进行压缩 可通过 -p 选项轻松提取和设置 CSRF 令牌 支持 POST multipart，以及通过 -f 选项进行 XSS 文件上传...

TProxer

TProxer Una extensión de Burp Suite diseñada para automatizar el proceso de encontrar SSRF basado en rutas de proxy inverso. Cómo funciona • Instalación • Por hacer • Únete a Discord Cómo funciona Intenta obtener acceso a APIs o archivos internos mediante un ataque SSRF basado en rutas. Por...

CVE-2026-106243

Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

CVE-2026-106214

Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. Chromium security severity: High...

nikto

nikto Nikto web server scanner - https://cirt.net/Nikto2 Full documentation - https://github.com/sullo/nikto/wiki Run normally: git clone https://github.com/sullo/nikto Main script is in program/ cd nikto/program Run using the shebang interpreter ./nikto.pl -h http://www.example.com Run using per...

ChromeAlone

ChromeAlone - A Browser C2 Framework What does this get me? ChromeAlone is a browser implant that can be used in place of conventional implants like Cobalt Strike or Meterpreter. This repo provides a simple build process that will generate a management console, deploy infrastructure, and create a...