redshell

RedShell 一个用于红队和渗透测试的交互式命令提示符。自动通过SOCKS4/5代理经由 proxychains 推送命令。可选的 Cobalt Strike 集成可从团队服务器拉取 Beacon 的 SOCKS4/5 代理。活动自动记录到本地 CSV 文件以及（若已配置）Cobalt Strike 团队服务器。 请注意，由于 RedShell 底层使用 proxychains，仅 TCP 流量会被代理。 安装 RedShell 运行在 Python 3.8 上。 安装依赖： root@kitploit: pip3 install -r requirements.txt 安装...

gtunnel

Documentation can be found at: https://hotnops.gitbook.io/gtunnel/...

TCLtools

用于Cisco IOS渗透测试的TCL脚本 借助TCLtools，你可以将任何Cisco IOS硬件转变为跳板站。设置和使用都非常简单！ 功能特性 TCLmap — 端口扫描器实现（nmap） TCLproxy — 代理服务器实现 TCLproxy TCLproxy 是一款用于通过Cisco设备进行跳板渗透的工具。它能够转发任意TCP端口或启动代理服务器。 root@kitploit: TCLproxy v0.0.3 Usage: tclsh ./tclproxy.tcl -L address... -D address... Proxy server implementation...

proxychains

README de ProxyChains ver. 4.3.0 ProxyChains es un programa UNIX que engancha las funciones de libc relacionadas con la red en programas enlazados dinámicamente mediante una DLL precargada y redirige las conexiones a través de proxies SOCKS4a/5 o HTTP. ADVERTENCIA: este programa solo funciona con...

evilrdp

🚩 赞助者 如果你喜欢这个项目，请考虑在 GitHub 上赞助它！赞助者 EVILRDP - 更强大的 RDP 控制 它是 aardwolfgui 的邪恶双胞胎，使用 aardwolf RDP 客户端库，为您提供对目标的扩展控制以及从命令行进行额外脚本编写的能力。 功能 从命令行以自动化方式控制鼠标和键盘 从命令行以自动化方式控制剪贴板 从客户端生成一个 SOCKS 代理，通过 RDP 将网络通信通道传输到目标 在目标上执行任意 SHELL 和 PowerShell 命令，无需上传文件 即使在目标上禁用了文件传输，也支持上传和下载文件 脚本 evilrdp - GUI + 命令行 RDP...

reGeorg

reGeorg root@kitploit: | | | | | || | || |/ | | | | | \ | || | | || || || \ | | | ||\|||| |||/||\|| || ... every office needs a tool like Georg [email protected] / @wm [email protected] / @trowalts [email protected] / @kampstaaldraad 版本 1.0 依赖 reGeorg 需要 Python 2.7 以及以下模块：...

pentest-pivoting

Guía de Pivoting Tabla de contenido 1. Notas importantes 2. Reenvío dinámico de puertos SSH 3. Reenvío remoto de puertos SSH 4. Reenvío local de puertos SSH 5. Doble Pivoting 6. sshuttle 7. Chisel 8. Usando Burpsuite como proxy 9. Recursos útiles Notas importantes No utilices solicitudes de eco...

Linux Distros Unpatched Vulnerability : CVE-2026-85719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and...

Lastenzug

LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...

Fenrir

Fenrir Publicado como código abierto por NCC Group Plc - http://www.nccgroup.com/ Desarrollado por Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Publicado bajo AGPL, consulte LICENSE para más información Descripción Fenrir fue creado para demostrar que ...

google_socks

此脚本用于允许两个套接字通过Google Drive中继数据进行通信。 查看此博客文章了解更多详情。 设置过程 安装所需的Python模块（见下文） 运行 "python2 ./googlesocks.py --setup" 并按照说明操作 创建一个Google API项目 为项目创建OAuth客户端ID凭据 下载这些凭据的JSON文件 将凭据文件移动到googlesocks目录并将其命名为"clientsecrets.json" 接着，设置脚本会给你一个Google链接并要求输入密钥 点击链接，授权脚本使用API，并获取密钥 将密钥粘贴回设置脚本的提示中...

DEBIAN-CVE-2026-85719

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

IPGhost

IPGhost IPGhost 是一款面向道德黑客的强大工具。它通过 Tor 网络帮助你在网络上保持私密和匿名。该工具会自动更换你的 IP 地址，使他人难以追踪你的在线活动。 功能 自动安装所需依赖（Tor、curl、jq）。 定期通过 Tor 更换 IP 地址以保持匿名。 每次 IP 更换后显示当前 Tor 路由 IP 地址。 显示位置详细信息（国家、地区、城市）。 用户自定义 IP 更换间隔和更换次数（或无限模式）。 退出时自动停止 Tor 服务，避免不必要的资源占用。 提供 SOCKS 代理设置说明，以便将应用程序流量路由至 Tor。 要求 该工具支持大多数主流 Linux...

CVE-2026-85719 AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719 AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719

AsyncHttpClient (AHC) , a Java library for asynchronous HTTP requests, contains a credential-exposure flaw in its SOCKS proxy handling. NettyRequestFactory and NettyRequestSender attach the Proxy-Authorization header without verifying the request is actually being sent to an HTTP proxy, so creden...

CVE-2026-84381

HTTPX2 is a next-generation HTTP client for Python. Prior to 2.10.0 , the underlying httpcore2 library failed to initiate TLS when a WebSocket connection (wss) was routed through a SOCKS5 proxy , because the TLS upgrade condition only recognized the https scheme. As a result, the WebSocket handsh...

CVE-2026-84381 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

CVE-2026-19854

When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...