Stowaway

Stowaway English Stowaway是一个利用go语言编写、专为渗透测试工作者制作的多级代理工具 用户可使用此程序将外部流量通过多个节点代理至内网，突破内网访问限制，构造树状节点网络，并轻松实现管理功能 谢谢各位的star，同时欢迎大家使用后提出问题&&Bug 😘 同时也请各位务必在使用前详细阅读使用方法及文末的注意事项 声明 本项目仅供网络安全研究与教学用途，严禁用于任何非法用途。请确保在使用本工具进行任何测试之前，已获得目标系统明确的授权，并严格遵守您所在国家/地区的相关法律法规。...

thc-tips-tricks-hacks-cheat-sheet

Los consejos, trucos y hacks favoritos de THC Hoja de referencia https://thc.org/tips Una colección de nuestros trucos favoritos. Muchos de esos trucos no son nuestros. Simplemente los recopilamos. Mostramos los trucos 'tal cual' sin ninguna explicación de por qué funcionan. Necesitas conocer Lin...

sish

sish 用于 HTTPS、WSS、TCP、别名和 SNI 的开源 SSH 隧道技术。 如果你喜欢 serveo/ngrok 风格的便捷分享，但又想使用普通的 SSH 并运行自己的基础设施，那么 sish 就是为此而生的。 最终用户无需自定义客户端 支持公网和私有隧道工作流 提供 Docker 和二进制发布 专为生产级自托管设计 文档 | 托管服务 | 发布页 | Docker 镜像 | 由 pico.sh 赞助 为什么选择 sish sish 运行着一个专注于转发和多路复用的 SSH 服务器。用户可以使用他们熟悉的命令进行连接，sish 负责处理路由。 典型用例 通过 HTTPS...

sshtunnel

|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

TREVORproxy

TREVORproxy 一款用 Python 编写的 SOCKS 代理，能够随机化你的源 IP 地址。通过 SSH 隧道轮询你的恶意数据包，或赋予它们数十亿个独特的源地址！ 请参阅随附的博客文章，其中包含有趣的吐槽和一些很酷的演示！ 注意：如果你想防御此攻击，我们为你编写了一个优秀速率限制器 🩵。 作者 @thetechr0mancer 安装 root@kitploit: pip install git+https://github.com/blacklanternsecurity/trevorproxy TREVORproxy IPv6 子网代理图示 TREVORproxy SSH...

minipwner

MiniPwner 一个配置运行 OpenWRT 的 TP-Link MR3040 成为简单而强大的渗透测试"投毒盒"的脚本。 什么是"MiniPwner"？ MiniPwner 是一个渗透测试"投毒盒"。 它被设计成一个小型、简单但强大的设备，可以悄无声息地插入网络，为渗透测试人员提供对该网络的远程访问。 它由一台运行 OpenWRT 的便携式 TP-Link MR3040 组成。 功能特性 集成有线和无线连接 一旦插入目标网络，Mini-Pwner 可以通过目标网络建立 SSH 隧道，也可以通过 WiFi 访问。此外，MiniPwner 可以配置为 WiFi...

Supershell

Supershell es una plataforma C2 de control remoto accesible a través de un servicio WEB. Mediante el establecimiento de túneles SSH inversos, obtiene una Shell totalmente interactiva y admite Payloads de múltiples arquitecturas de plataforma...

tap

La plataforma de ataque de TrustedSec TAP TAP - Constructor de plataformas de pruebas de penetración remotas. Escrito por: David Kennedy @HackingDave Empresa: TrustedSec https://www.trustedsec.com Página del proyecto: https://github.com/trustedsec/tap Un proyecto de TrustedSec - Copyright 2020...

SUSE CVE-2026-73564

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-74232

Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...

CVE-2026-53545

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...

CVE-2026-53545 Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...

CVE-2026-53545

Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...

PT-2026-78691

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2 Description An authenticated user can execute arbitrary commands on the source SSH host with the privileges of the connected SSH account. The issue occurs when the application interpolates endpointPort, sourcePor...

CVE-2026-53545: Improper Neutralization of Special Elements used in an OS Command

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...

GO-2026-6103 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp

frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow in github.com/fatedier/frp...

CVE-2026-73564

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

EUVD-2026-58179

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...