docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

redshell

RedShell An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Optional Cobalt Strike integration pulls beacon SOCKS4/5 proxies from the team server. Automatically logs activities to a local CSV file and a Cobalt Stri...

proxychains-ng

ProxyChains-NG 版本 4.17 自述文件 ProxyChains 是一个 UNIX 程序，它通过预加载的 DLL（dlsym、LDPRELOAD）挂钩动态链接程序中的网络相关 libc 函数，并将连接重定向到 SOCKS4a/5 或 HTTP 代理。它仅支持 TCP（不支持 UDP/ICMP 等）。 它的工作方式本质上是一种 HACK；因此它有可能无法与你的程序配合使用，尤其是当你的程序是脚本、会启动大量进程（如后台守护进程）或使用 dlopen 加载“模块”时（glibc 动态链接器中的一个 bug）。不过，它应该适用于简单的编译型（C/C++）动态链接程序。...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL dlsym, LDPRELOAD and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only no UDP/ICMP etc. The way it works is...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

MassBleed

MassBleed SSL Vulnerability Scanner USAGE: root@kitploit: sh massbleed.sh CIDR|IP single|port|subnet port proxy ABOUT: This script has four main functions with the ability to proxy all connections: To mass scan any CIDR range for OpenSSL vulnerabilities via port 443/tcp https example: sh...

ntlm_relay_gat

NTLM Relay Gat Description NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities,...

proxychains

ProxyChains 版本 4.3.0 README ProxyChains 是一个 UNIX 程序，它通过预加载的 DLL 钩住动态链接程序中的网络相关 libc 函数，并将连接重定向到 SOCKS4a/5 或 HTTP 代理。 警告：此程序仅适用于动态链接的程序。此外，proxychains 和要调用的程序必须使用相同的动态链接器（即相同的 libc）。 当前版本的已知限制 当进程 fork 时，在子进程中进行 DNS 查找，然后在父进程中使用该 IP，对应的 IP 映射将找不到，这是因为 fork 无法写回父进程的映射表。IRSSI 表现出这种行为，因此你必须将解析后的 IP...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

byp4xx

root@kitploit: / / / // / / / / / / / // /| |// |// / // / // / // / / Some cURL options you may use as example: -L follow redirections 30X responses -x : to set a proxy -m to set a timeout -H for new headers. Escape double quotes. -d for data in the POST requests body -... Built-in options:...

docker-onion-nmap

docker-onion-nmap Torネットワーク上の隠し「オニオン」サービスをスキャンするためにnmapを使用します。alpineベースの最小限のイメージで、proxychainsを使用してnmapをラップします。Torとdnsmasqはs6を介してデーモンとして実行され、proxychainsはTor...

cve-2020-1472

CVE-2020-1472 POC mac环境下通过proxychains代理的方式在window域环境中复现该漏洞。 Environment DC主域控制器: Domain User域成员主机: 通过gost直接设置socks5正向代理。 Attack Hacker攻击机: 设置proxychains4 root@kitploit: vim /Users/xq17/.proxychains/proxychains.conf 增加PrxoyList列表 ProxyList socks5 10.211.55.42 8099 Attack Tools攻击利用工具: root@kitploit...

CVE-2024-23897

读取系统上当前用户具有读取权限的任何文件的前3行。 该脚本在内部使用proxychains。 Usage: python CVE-2024-23897.py Example: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/ /var/lib/jenkins/secrets/master.key...

pentest-pivoting

Guía de Pivoting Tabla de contenido 1. Notas importantes 2. Reenvío dinámico de puertos SSH 3. Reenvío remoto de puertos SSH 4. Reenvío local de puertos SSH 5. Doble Pivoting 6. sshuttle 7. Chisel 8. Usando Burpsuite como proxy 9. Recursos útiles Notas importantes No utilices solicitudes de eco...

[SECURITY] Fedora 43 Update: proxychains-ng-4.17-8.fc43

ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...

[SECURITY] Fedora 42 Update: proxychains-ng-4.17-8.fc42

ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...

Fedora 43 : proxychains-ng (2025-58fe871812)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-58fe871812 advisory. Update to master to fix CVE-2025-34451 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : proxychains-ng (2025-ec760de8e2)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ec760de8e2 advisory. Update to master to fix CVE-2025-34451 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...