cs2modrewrite

Automatically Generate Rulesets for Apache modrewrite or Nginx for Intelligent HTTP C2 Redirection This project converts a Cobalt Strike profile to a functional modrewrite .htaccess or Nginx config file to support HTTP reverse proxy redirection to a Cobalt Strike teamserver. The use of reverse...

multitor

multitor 创建多个带负载均衡的TOR实例。 描述 • 简介 • 使用方法 • 参数 • 要求 • Docker • 其他 • 许可证 • Wiki 描述 它为客户端提供一个单一端点。支持 HAProxy 、socks 协议和 http-proxy 服务器：polipo 、privoxy 和 hpts 。 此外，你可以 查看 之前运行的 TOR 进程，并为全部或选定的进程创建 新身份 。 multitor 已基于以下项目完全重写： Jan Seidl 编写的 Multi-TOR 项目：Multi-TOR 原始来源（ Sebastian Wain 项目）：使用多个 TOR...

wreckuests

What is this? Wreckuests is a script, which allows you to run DDoS attacks with HTTP-floodGET/POST. It's written in pure Python and uses proxy-servers as "bots". OF COURSE, this script is not universal and you can't just drop Pentagon/NSA/whatever website with just a single mouse click. Each atta...

DSSS

Damn Small SQLi Scanner Damn Small SQLi Scanner DSSS is a fully functional SQL injection vulnerability scanner supporting GET and POST parameters written in under 100 lines of code. As of optional settings it supports HTTP proxy together with HTTP header values User-Agent, Referer and Cookie...

hakoriginfinder

hakoriginfinder 用于发现反向代理背后的原始主机的工具。可用于绕过 WAF 及其他反向代理。 工作原理 此工具首先向您提供的主机名/URL 发起 HTTP 请求并存储响应，然后向您提供的每个 IP 地址通过 HTTP（80）和 HTTPS（443）默认发起请求（更多端口可通过选项指定），并将 Host 头设置为原始主机:port。随后使用 Levenshtein 算法将每个响应与原始响应进行比较，以确定相似度。如果响应相似，则视为匹配。 用法 通过 stdin 提供 IP 地址列表，并通过 -h 选项提供原始主机名。例如： prips 93.184.216.0/24 |...

CVE-2023-38545

CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...

CVE-2023-47246-EXP

Vulnerability Details 1. fofa: body="sysaid-logo-dark-green.png" || title="SysAid Help Desk Software" || body="Help Desk software by SysAid" 2. Affected versions: SysAid Server23.3.36 Vulnerability Recurrence 1. Execute the script: git clone https://github.com/W01fh4cker/CVE-2023-47246-EXP.git cd...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: apollo-router, sccache, ntpd-rs, komodo, linkerd2-proxy...

GHSA-5J98-2G5X-46V6 vulnerabilities

Vulnerabilities for packages: ntpd-rs, linkerd2-proxy, sccache...

GHSA-6F2X-V7Q7-M7M5 vulnerabilities

Vulnerabilities for packages: ntpd-rs, linkerd2-proxy, sccache...

GHSA-6W6G-HM98-MHGM vulnerabilities

Vulnerabilities for packages: ntpd-rs, linkerd2-proxy, sccache...

dnscrypt-proxy

Descripción general Un proxy DNS flexible, con soporte para protocolos DNS cifrados modernos como DNSCrypt v2, incluyendo DNSCrypt Post-Quantum DNSCrypt 2026, DNS-over-HTTPS, DNSCrypt Anonimizado y ODoH Oblivious DoH. Documentación de dnscrypt-proxy ← Empieza aquí Página principal del proyecto...

AIX360

AI Explainability 360 v0.3.0 ✨ NUEVO: IBM Research tiene un nuevo kit de herramientas In-Context Explainability 360 ICX360 que extiende la explicabilidad a los LLM , específicamente en cuanto a la entrada proporcionada al LLM. ¡Échale un vistazo! 🚀✨ El kit de herramientas AI Explainability 360 es...

CVE-2023-26360

CVE-2023-26360 Usage Usage: python3 script.py endpoint proxyurl Reading Files...

Admin-Scanner

Admin-Scanner 网站管理员面板查找器 如何安装？ Linux/PC sudo apt install python3 sudo apt install python3-pip sudo apt install git git clone https://github.com/alienwhatever/Admin-Scanner.git cd Admin-Scanner 如何安装？ Termux/Android pkg update && pkg upgrade pkg install python3 pkg install git git clone...

WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure

Razvan Stanga Varnish/Nginx Proxy Caching = 1.8.3 contains an insertion of sensitive information into sent data vulnerability caused by improper handling of embedded sensitive data, letting attackers retrieve sensitive information, exploit requires crafted requests. id: CVE-2025-62126 info: name:...

LiteLLM - SQL Injection

LiteLLM 1.81.16 to 1.83.7 contains a SQL injection caused by improper handling of caller-supplied key in database query during proxy API key checks, letting unauthenticated attackers read and modify database data, exploit requires crafted Authorization header. id: CVE-2026-42208 info: name: LiteL...

Planyo Online Reservation System <= 3.0 - Arbitrary File Read

The Planyo Online Reservation System plugin for WordPress through 3.0 ships ulap.php, an AJAX proxy that is directly reachable without WordPress bootstrapping or authentication. The sendhttppost function validates the host of the supplied URL against an allowlist that includes localhost, but neve...

LiteLLM Proxy < 1.84.0 - Host Header Authentication Bypass

LiteLLM Proxy before 1.84.0 derives its public-route authorization check from a URL reconstructed with the unvalidated Host header. A Host value containing a fragment can make a protected request appear to target the public root route, bypassing the API-key check. Version 1.84.0 derives the route...

Apache Druid - Server-Side Request Forgery

Server-Side Request Forgery SSRF, Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting', URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Apache Druid.This issue affects all previous Druid versions.When using the Druid management proxy, a request tha...