pagodo

pagodo - Passive Google Dork Introduction pagodo automates Google searching for potentially vulnerable web pages and applications on the Internet. It replaces manually performing Google dork searches with a web GUI browser. There are 2 parts. The first is ghdbscraper.py that retrieves the latest...

ligolo

Ligolo : Reverse Tunneling made easy for pentesters, by pentesters Table of Contents Introduction Use case Quick Demo Performance Usage Setup / Compiling How to use? TL;DR Options Features To Do Licensing Credits Introduction Ligolo is a simple and lightweight tool for establishing SOCKS5 or TCP...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains es un programa UNIX que engancha las funciones libc relacionadas con la red en programas ENLAZADOS DINÁMICAMENTE mediante una DLL precargada dlsym, LDPRELOAD y redirige las conexiones a través de proxies SOCKS4a/5 o HTTP. Solo soporta TCP no UDP/ICMP,...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains is a UNIX program, that hooks network-related libc functions in DYNAMICALLY LINKED programs via a preloaded DLL dlsym, LDPRELOAD and redirects the connections through SOCKS4a/5 or HTTP proxies. It supports TCP only no UDP/ICMP etc. The way it works is...

mssqlproxy

mssqlproxy mssqlproxy is a toolkit aimed to perform lateral movement in restricted environments through a compromised Microsoft SQL Server via socket reuse. The client requires impacket and sysadmin privileges on the SQL server. Please read this article carefully before continuing. It consists of...

redshell

RedShell 一个用于红队和渗透测试的交互式命令提示符。自动通过SOCKS4/5代理经由 proxychains 推送命令。可选的 Cobalt Strike 集成可从团队服务器拉取 Beacon 的 SOCKS4/5 代理。活动自动记录到本地 CSV 文件以及（若已配置）Cobalt Strike 团队服务器。 请注意，由于 RedShell 底层使用 proxychains，仅 TCP 流量会被代理。 安装 RedShell 运行在 Python 3.8 上。 安装依赖： pip3 install -r requirements.txt 安装 proxychains-ng...

MassBleed

MassBleed SSL漏洞扫描器 使用方法： sh massbleed.sh CIDR|IP single|port|subnet port proxy 简介： 该脚本具有四个主要功能，并能通过代理转发所有连接： 批量扫描任意 CIDR 网段中通过 443/tcp https 端口的 OpenSSL 漏洞（示例：sh massbleed.sh 192.168.0.0/16） 扫描任意 CIDR 网段中通过指定自定义端口的 OpenSSL 漏洞（示例：sh massbleed.sh 192.168.0.0/16 port 8443）...

byp4xx

/ / / // / / / / / / / // /| |// |// / // / // / // / / Some cURL options you may use as example: -L follow redirections 30X responses -x : to set a proxy -m to set a timeout -H for new headers. Escape double quotes. -d for data in the POST requests body -... Built-in options: --all Verbose mode...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

docker-onion-nmap

docker-onion-nmap 使用 nmap 扫描 Tor 网络上的隐藏“onion”服务。基于 alpine 的最小化镜像，通过 proxychains 包装 nmap。Tor 和 dnsmasq 通过 s6 作为守护进程运行，proxychains 包装 nmap 以使用端口 9050 上的 Tor SOCKS 代理。Tor 还通过 DNSPort 配置，以匿名方式将 DNS 请求解析到端口 9053。dnsmasq 配置为将 localhost:9053 作为权威 DNS 服务器。Proxychains 配置为通过本地解析器代理 DNS，因此所有 DNS 请求都将通过...

ntlm_relay_gat

NTLM Relay Gat Description NTLM Relay Gat is a powerful tool designed to automate the exploitation of NTLM relays using ntlmrelayx.py from the Impacket tool suite. By leveraging the capabilities of ntlmrelayx.py, NTLM Relay Gat streamlines the process of exploiting NTLM relay vulnerabilities,...

adidnsdump

Active Directory Integrated DNS dump tool By default any user in Active Directory can enumerate all DNS records in the Domain or Forest DNS zones, similar to a zone transfer. This tool enables enumeration and exporting of all DNS records in the zone for recon purposes of internal networks. For mo...

cve-2020-1472

CVE-2020-1472 POC mac环境下通过proxychains代理的方式在window域环境中复现该漏洞。 Environment DC主域控制器: Domain User域成员主机: 通过gost直接设置socks5正向代理。 Attack Hacker攻击机: 设置proxychains4 vim /Users/xq17/.proxychains/proxychains.conf 增加PrxoyList列表 ProxyList socks5 10.211.55.42 8099 Attack Tools攻击利用工具: 1.git clone...

proxychains

README de ProxyChains ver. 4.3.0 ProxyChains es un programa UNIX que engancha las funciones de libc relacionadas con la red en programas enlazados dinámicamente mediante una DLL precargada y redirige las conexiones a través de proxies SOCKS4a/5 o HTTP. ADVERTENCIA: este programa solo funciona con...

CVE-2024-23897

Lee las primeras 3 líneas de cualquier archivo con permiso de lectura para el usuario actual en el sistema. El script usa proxychains internamente. Uso: python CVE-2024-23897.py Ejemplo: python CVE-2024-23897.py /mnt/hgfs/Share/jenkins-cli.jar http://10.10.14.8:8080/...

pentest-pivoting

Guía de Pivoting Tabla de contenido 1. Notas importantes 2. Reenvío dinámico de puertos SSH 3. Reenvío remoto de puertos SSH 4. Reenvío local de puertos SSH 5. Doble Pivoting 6. sshuttle 7. Chisel 8. Usando Burpsuite como proxy 9. Recursos útiles Notas importantes No utilices solicitudes de eco...

[SECURITY] Fedora 43 Update: proxychains-ng-4.17-8.fc43

ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...

[SECURITY] Fedora 42 Update: proxychains-ng-4.17-8.fc42

ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...

Fedora 43 : proxychains-ng (2025-58fe871812)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-58fe871812 advisory. Update to master to fix CVE-2025-34451 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

Fedora 42 : proxychains-ng (2025-ec760de8e2)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-ec760de8e2 advisory. Update to master to fix CVE-2025-34451 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...