28613 matches found
katana
A next-generation crawling and spidering framework Features • Installation • Usage • Scope • Config • Filters • Join Discord Features Fast And fully configurable web crawling Standard and Headless mode JavaScript parsing / crawling Customizable automatic form filling Scope control - Preconfigured...
ghauri
Like Ghauri, consider supporting the developer Ghauri An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flaws. Requirements Python 3 Python pip3 Installation cd to ghauri directory. install requirements: python3 -m pip install --upgrade ...
vm2
vm2 !NPM Versionnpm-imagenpm-url !NPM Downloadsdownloads-imagedownloads-url !Licenselicense-imagelicense-url !Known Vulnerabilitiessnyk-imagesnyk-url vm2 — это песочница, которая может запускать недоверенный код с использованием разрешённых встроенных модулей Node. Установкаsh npm install vm2 Qui...
pystinger
pystinger English | 简体中文 Pystinger implements SOCK4 proxy and port mapping through webshell. It can be directly used by metasploit-framework, viper, cobalt strike for session online. Pystinger is developed in python, and currently supports three proxy scripts: php, jspx and aspx. Usage Suppose th...
burpflow
BurpFlow BurpFlow — это легковесный Node.js CLI-инструмент, который направляет HTTP-запросы через прокси Burp Suite, позволяя специалистам по безопасности быстро загружать и анализировать URL-адреса разведки внутри Burp. 🎯 Что такое BurpFlow? BurpFlow — это быстрый, эффективный и минималистичный...
CVE-2026-88899
CVE-2026-88899 - Knowns 0.30.0 인증되지 않은 헤더 주입으로 AI 에이전트가 호스트 파일시스템에 무제한 접근 가능 개요 Knowns의 내장 OpenCode AI 에이전트 데몬용 리버스 프록시internal/server/server.go와 관련하여 부적절한 권한 부여 및 헤더 스푸핑 취약점이 보고되었습니다. 보고서에 따르면, 로컬 OpenCode 데몬으로 HTTP 요청을 프록시할 때 프록시가 x-opencode-directory 요청 헤더와 ?directory 쿼리 파라미터를 무조건 덮어쓰지 못했습니다. ...
matchlock
Matchlock Expérimental : Ce projet est encore en développement actif et peut subir des changements majeurs. Matchlock est un outil en ligne de commande CLI pour exécuter des agents IA dans des micro-VM éphémères – avec une liste blanche réseau, une injection de secrets via un proxy MITM et un...
psc
PortShellCrypter -- PSC Ce projet - ainsi que son projet frère crash - fait partie de mon ensemble d'outils anti-censure qui permet de mettre en place des shells cryptés entièrement fonctionnels et du forwarding TCP/UDP dans des environnements de censure hostiles. Il est également utile en...
cve-2026-49352-poc
CVE-2026-49352 — 9router Hardcoded JWT Secret Authentication Bypass Table of Contents Overview Affected Versions Root Cause Analysis Repository Structure Requirements Usage Expected Output References Disclaimer Overview CVE-2026-49352 is a vulnerability in 9router, a self-hosted Node.js/Next.js...
oauth2-proxy
OAuth2 Proxy — это гибкий инструмент с открытым исходным кодом, который может выступать как в роли автономного обратного прокси, так и в роли middleware-компонента, интегрируемого в существующие настройки обратного прокси или балансировщика нагрузки. Он предоставляет простой и безопасный способ...
hyperfox
Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...
hyperfox
Hyperfox Hyperfox1 est un outil d'audit de sécurité qui proxy et enregistre le trafic HTTP et HTTPS entre deux points. Installation Vous pouvez installer la dernière version de hyperfox dans /usr/local/bin avec la commande suivante nécessite des privilèges administrateur : curl -sL...
HTTPoxyScan
HTTPoxy Exploit Scanner by 1N3 @CrowdShield https://crowdshield.com Last Updated: 20160720 ABOUT: PoC/Exploit scanner to scan common CGI files on a target URL for the HTTPoxy vulnerability. Httpoxy is a set of vulnerabilities that affect application code running in CGI, or CGI-like environments...
BDFProxy
New version of BDFProxy is out! Only to sponsors! Get access here: https://github.com/sponsors/secretsquirrel BLOG: http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 For security professionals and researchers only...
Simulation_CVE-2024-46256
CVE-2024-46256 & CVE-2024-46257 – PoC Simulation Overview This repository contains a step-by-step, image-backed Proof of Concept PoC simulating two vulnerabilities in Nginx Proxy Manager that enable OS Command Injection, leading to Remote Code Execution RCE after authentication. Affected product:...
multitor
multitor Créez plusieurs instances TOR avec équilibrage de charge. Description • Introduction • Utilisation • Paramètres • Prérequis • Docker • Autres • Licence • Wiki Description Fournit un point d'accès unique pour les clients. Prend en charge HAProxy , le protocole socks et les serveurs...
GHSA-6W6G-HM98-MHGM vulnerabilities
Vulnerabilities for packages: linkerd2-proxy, komodo, sccache, apollo-router, ntpd-rs, vector...
GHSA-5J98-2G5X-46V6 vulnerabilities
Vulnerabilities for packages: sccache, ntpd-rs, linkerd2-proxy...