Lastenzug

LastenZug Este proyecto implementa un proxy Socka4a basado en websockets. El componente cliente está implementado en C y se compila hasta convertirse en código totalmente independiente de posición PIC. Durante el proceso de compilación, se aplica ofuscación a nivel de ensamblador mediante una...

pivotnacci

pivotnacci 通过部署HTTP代理进入内部网络。Pivotnacci 允许你创建一个与HTTP agents进行通信的socks服务器。架构如下所示： 该工具受到优秀的 reGeorg 的启发。但它包含一些改进： 支持负载均衡服务器 可自定义轮询间隔，有助于降低检测率 自动丢弃被服务器关闭的连接 模块化且更简洁的代码 通过pip安装 受密码保护的代理 支持的socks协议 Socks 4 Socks 5 No authentication User password GSSAPI 安装 从Python包安装： root@kitploit: pip3 install...

redshell

RedShell 一个用于红队和渗透测试的交互式命令提示符。自动通过SOCKS4/5代理经由 proxychains 推送命令。可选的 Cobalt Strike 集成可从团队服务器拉取 Beacon 的 SOCKS4/5 代理。活动自动记录到本地 CSV 文件以及（若已配置）Cobalt Strike 团队服务器。 请注意，由于 RedShell 底层使用 proxychains，仅 TCP 流量会被代理。 安装 RedShell 运行在 Python 3.8 上。 安装依赖： root@kitploit: pip3 install -r requirements.txt 安装...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

CVE-2023-38545

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamas. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de vuelta a...

Fenrir

Fenrir Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Publicado bajo AGPL, consulte LICENSE para más información Descripción Fenrir fue creado para demostrar que ...

google_socks

此脚本用于允许两个套接字通过Google Drive中继数据进行通信。 查看此博客文章了解更多详情。 设置过程 安装所需的Python模块（见下文） 运行 "python2 ./googlesocks.py --setup" 并按照说明操作 创建一个Google API项目 为项目创建OAuth客户端ID凭据 下载这些凭据的JSON文件 将凭据文件移动到googlesocks目录并将其命名为"clientsecrets.json" 接着，设置脚本会给你一个Google链接并要求输入密钥 点击链接，授权脚本使用API，并获取密钥 将密钥粘贴回设置脚本的提示中...

IPGhost

IPGhost IPGhost 是一款面向道德黑客的强大工具。它通过 Tor 网络帮助你在网络上保持私密和匿名。该工具会自动更换你的 IP 地址，使他人难以追踪你的在线活动。 功能 自动安装所需依赖（Tor、curl、jq）。 定期通过 Tor 更换 IP 地址以保持匿名。 每次 IP 更换后显示当前 Tor 路由 IP 地址。 显示位置详细信息（国家、地区、城市）。 用户自定义 IP 更换间隔和更换次数（或无限模式）。 退出时自动停止 Tor 服务，避免不必要的资源占用。 提供 SOCKS 代理设置说明，以便将应用程序流量路由至 Tor。 要求 该工具支持大多数主流 Linux...

Arti Mobile - Tor in Rust for Android and iOS

Arti Mobile：用于Android和iOS的Rust版Tor 官方Arti Mobile库，由Tor Project支持，将新的Tor Rust运行时引入移动设备。 这是一个共享项目，旨在为Android和iOS应用程序公开Tor Arti的标准API。 该项目基于以下项目： Trinity 的 https://gitlab.torproject.org/trinity-1686a/arti-mobile-example/ uniq 的 https://codeberg.org/uniqx/arti-android ahf 的...

CVE-2023-51385

CVE-2023-51385 RCE en ProxyCommand de OpenSSH 1. Cuando tu ProxyCommand esté configurado de la siguiente manera: root@kitploit: Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. Usa el siguiente comando como prueba de concepto root@kitploit: git clone...

pentest-pivoting

Guía de Pivoting Tabla de contenido 1. Notas importantes 2. Reenvío dinámico de puertos SSH 3. Reenvío remoto de puertos SSH 4. Reenvío local de puertos SSH 5. Doble Pivoting 6. sshuttle 7. Chisel 8. Usando Burpsuite como proxy 9. Recursos útiles Notas importantes No utilices solicitudes de eco...

CVE-2026-84381 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

CVE-2026-84381

HTTPX2 is a next-generation HTTP client for Python. Prior to 2.10.0 , the underlying httpcore2 library failed to initiate TLS when a WebSocket connection (wss) was routed through a SOCKS5 proxy , because the TLS upgrade condition only recognized the https scheme. As a result, the WebSocket handsh...

CVE-2026-19854

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

clickhouse-datasource silently drops TLS over PDC

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...

Astra Linux – Vulnerability in Firefox

When Multi-Account Containers was enabled, DNS requests could bypass a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140...

Null Byte Interaction Error (Poison Null Byte)

Overview Affected versions of this package are vulnerable to Null Byte Interaction Error Poison Null Byte via the Socks4ClientEncoder and Socks5ClientEncoder in codec-socks. An attacker can truncate or alter encoded SOCKS requests by supplying userId, destination host, username, or password value...

CVE-2026-62380 Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection

Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 Socks4ClientEncoder and SOCKS5 Socks5ClientEncoder client encoders, which fail to validate domain address and...

CVE-2026-62380 Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection

Netty io.netty:netty-codec-socks versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabilities in the SOCKS4 Socks4ClientEncoder and SOCKS5 Socks5ClientEncoder client encoders, which fail to validate domain address and...

EUVD-2026-62855

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The...