PowerProxy

PowerProxy PowerShell SOCKS proxy with reverse proxy capabilities. PowerProxy is written with penetration testers in mind. Reverse proxy functionality is a priority, for traversing networks that block inbound connections. Reverse proxy connections are encrypted by default. Username/Password...

aclpwn.py

aclpwn.py Aclpwn.py is a tool that interacts with BloodHound to identify and exploit ACL based privilege escalation paths. It takes a starting and ending point and will use Neo4j pathfinding algorithms to find the most efficient ACL based privilege escalation path. Aclpwn.py is similar to the...

ProxyBroker

ProxyBroker .. image:: https://img.shields.io/pypi/v/proxybroker.svg?style=flat-square :target: https://pypi.python.org/pypi/proxybroker/ .. image:: https://img.shields.io/travis/constverum/ProxyBroker.svg?style=flat-square :target: https://travis-ci.org/constverum/ProxyBroker .. image::...

Arti Mobile - Tor in Rust for Android and iOS

Arti Mobile: Tor in Rust for Android and iOS The official Arti Mobile library, supported by Tor Project, bringing the new Tor Rust runtime to mobile devices. This is a shared project for exposing a standard API for Tor Arti to Android and iOS applications. This was based on the following projects...

filebuster

Filebuster An extremely fast and flexible web fuzzer What is it? Filebuster is a HTTP fuzzer / content discovery script with loads of features and built to be easy to use and fast! It uses one of the fastest HTTP classes in the world of PERL - Furl::HTTP. Also the thread modelling is optimized to...

CVE-2023-51385

CVE-2023-51385 OpenSSH ProxyCommand RCE 1. When your ProxyCommand is configured as follows: Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. Use the following command for proof of concept git clone https://github.com/Le1a/CVE-2023-51385 --recurse-submodules...

stunner

STUNNER Stunner es una herramienta para probar y explotar servidores STUN, TURN y TURN sobre TCP. TURN es un protocolo usado principalmente en videoconferencias y chats de audio WebRTC. Si encuentras un servidor mal configurado, puedes usar esta herramienta para abrir un proxy socks local que...

pentest-pivoting

Pivoting Guide Table of Contents 1. Important Notes 2. SSH Dynamic Port Forwarding 3. SSH Remote Port Forwarding 4. SSH Local Port Forwarding 5. Double Pivoting 6. sshuttle 7. Chisel 8. Using Burpsuite as Proxy 9. Usefull Resources Important Notes Do not use ICMP echo requests ping to test SOCKS...

pivotnacci

pivotnacci Pivota hacia la red interna desplegando agentes HTTP. Pivotnacci te permite crear un servidor socks que se comunica con agentes HTTP. La arquitectura es la siguiente: Esta herramienta fue inspirada por el excelente reGeorg. Sin embargo, incluye algunas mejoras: Soporte para servidores...

psc

PortShellCrypter -- PSC Este proyecto - así como su proyecto hermano crash - pertenece a mi conjunto de herramientas contra la censura que permite configurar shells encriptados y reenvío TCP/UDP completamente funcionales en entornos hostiles de censura. También es útil para forense para volcar...

proxychains-ng

ProxyChains-NG ver 4.17 README ProxyChains è un programma UNIX che aggancia le funzioni libc relative alla rete nei programmi collegati DINAMICAMENTE tramite una DLL precaricata dlsym, LDPRELOAD e reindirizza le connessioni attraverso proxy SOCKS4a/5 o HTTP. Supporta solo TCP niente UDP/ICMP, ecc...

multitor

multitor Crea più istanze TOR con bilanciamento del carico. Descrizione • Introduzione • Come Usare • Parametri • Requisiti • Docker • Altro • Licenza • Wiki Descrizione Fornisce un singolo endpoint per i client. Supporta HAProxy , il protocollo socks e server http-proxy : polipo , privoxy e hpts...

proxychains

README de ProxyChains ver. 4.3.0 ProxyChains es un programa UNIX que engancha las funciones de libc relacionadas con la red en programas enlazados dinámicamente mediante una DLL precargada y redirige las conexiones a través de proxies SOCKS4a/5 o HTTP. ADVERTENCIA: este programa solo funciona con...

Lastenzug

LastenZug This project implements a Socka4a proxy based on websockets. The client component is implemented in C compiling down to fully position independent code PIC. During the compilation process, obfuscation is applied on assembly level by leveraging a second tool: SpiderPIC located in...

Fenrir

Fenrir Rilasciato come open source da NCC Group Plc - http://www.nccgroup.com/ Sviluppato da Dave Spencer, david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir Rilasciato sotto AGPL, per maggiori informazioni vedere LICENSE Descrizione Fenrir è stato creato per dimostrare c...

google_socks

This script is used to allow two sockets to communicate while relaying data through Google Drive. Check out this blog post for more details. Setup Process Install needed python modules see below Run "python2 ./googlesocks.py --setup" and follow the instructions Create a Google API Project Create...

IPGhost

IPGhost IPGhost is a strong tool for ethical hackers. It helps you stay private and anonymous online by using the Tor network. This tool automatically changes your IP address, making it hard for anyone to track your online activities. Features Automatic installation of required dependencies Tor,...

Linux Distros Unpatched Vulnerability : CVE-2026-107230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14,...

DEBIAN-CVE-2026-107230

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14, connection-pool partitioning still omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. Logins...

PT-2026-107680

Name of the Vulnerable Software and Affected Versions AsyncHttpClient versions 2.0.0 through 3.0.13 Description Connection-pool partitioning omits identity-defining fields for Kerberos, SPNEGO, NTLM, and authenticated proxy connections. This allows logins without a configured principal, proxy...