redshell

RedShell An interactive command prompt for red teaming and pentesting. Automatically pushes commands through SOCKS4/5 proxies via proxychains. Optional Cobalt Strike integration pulls beacon SOCKS4/5 proxies from the team server. Automatically logs activities to a local CSV file and a Cobalt Stri...

pivotnacci

pivotnacci 通过部署HTTP代理进入内部网络。Pivotnacci 允许你创建一个与HTTP agents进行通信的socks服务器。架构如下所示： 该工具受到优秀的 reGeorg 的启发。但它包含一些改进： 支持负载均衡服务器 可自定义轮询间隔，有助于降低检测率 自动丢弃被服务器关闭的连接 模块化且更简洁的代码 通过pip安装 受密码保护的代理 支持的socks协议 Socks 4 Socks 5 No authentication User password GSSAPI 安装 从Python包安装： root@kitploit: pip3 install...

TCLtools

TCL scripts for Cisco IOS penetration testing With TCLtools you can transform any Cisco IOS hardware into a pivoting station. It's easy to set up and use! Features TCLmap — Port scanner implementation nmap TCLproxy — Proxy server implementation TCLproxy TCLproxy is a tool for pivoting through Cis...

proxychains

ProxyChains 版本 4.3.0 README ProxyChains 是一个 UNIX 程序，它通过预加载的 DLL 钩住动态链接程序中的网络相关 libc 函数，并将连接重定向到 SOCKS4a/5 或 HTTP 代理。 警告：此程序仅适用于动态链接的程序。此外，proxychains 和要调用的程序必须使用相同的动态链接器（即相同的 libc）。 当前版本的已知限制 当进程 fork 时，在子进程中进行 DNS 查找，然后在父进程中使用该 IP，对应的 IP 映射将找不到，这是因为 fork 无法写回父进程的映射表。IRSSI 表现出这种行为，因此你必须将解析后的 IP...

Arti Mobile - Tor in Rust for Android and iOS

Arti Mobile：用于Android和iOS的Rust版Tor 官方Arti Mobile库，由Tor Project支持，将新的Tor Rust运行时引入移动设备。 这是一个共享项目，旨在为Android和iOS应用程序公开Tor Arti的标准API。 该项目基于以下项目： Trinity 的 https://gitlab.torproject.org/trinity-1686a/arti-mobile-example/ uniq 的 https://codeberg.org/uniqx/arti-android ahf 的...

CVE-2023-51385

CVE-2023-51385 OpenSSH ProxyCommand RCE 1. When your ProxyCommand is configured as follows: root@kitploit: Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. Use the following command for proof of concept root@kitploit: git clone https://github.com/Le1a/CVE-2023-51385...

pentest-pivoting

内网穿透指南 目录 1. 重要注意事项 2. SSH 动态端口转发 3. SSH 远程端口转发 4. SSH 本地端口转发 5. 双重 Pivoting 6. sshuttle 7. Chisel 8. 使用 Burpsuite 作为代理 9. 实用资源 重要注意事项 不要使用 ICMP 回显请求（ping）来测试 SOCKS 代理 。 SOCKS 是一种 Internet 协议，通过代理服务器在客户端和服务器之间交换网络数据包。实际上，SOCKS 服务器代理到任意 IP 地址的 TCP 连接，并提供了一种转发 UDP 数据包的方式。你应该使用基于 TCP 的协议来测试它（例如尝试...

Linux Distros Unpatched Vulnerability : CVE-2026-85719

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and...

Lastenzug

LastenZug 该项目实现了一个基于 websockets 的 Socka4a 代理。 客户端组件使用 C 语言实现，可编译为完全位置无关代码（PIC）。 在编译过程中，借助位于 LastenPIC/SpiderPIC 的第二个工具 SpiderPIC ，在汇编层面应用混淆。 SpiderPIC 混淆包括： 指令替换 添加垃圾指令并跳转越过垃圾指令 添加无用指令 这旨在破坏静态签名，但您需要记住，API 哈希、字符串和其他常量在此过程中不会被混淆。 用法 客户端 makefile 同时生成 PIC socks 客户端和用于 shellcode 的示例加载器。 您可以使用以下原型调用...

Fenrir

Fenrir 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 由 Dave Spencer 开发，david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Fenrir 根据 AGPL 许可发布，更多信息请参阅 LICENSE 描述 Fenrir 的创建旨在证明通过 RDP 虚拟通道隧道传输网络流量是可行的，但它仍处于初期阶段。这个 PoC 旨在通过虚拟通道隧道传输 meterpreter 反向 HTTP shell。长期目标是创建一个功能完备的 sock...

google_socks

This script is used to allow two sockets to communicate while relaying data through Google Drive. Check out this blog post for more details. Setup Process Install needed python modules see below Run "python2 ./googlesocks.py --setup" and follow the instructions Create a Google API Project Create...

DEBIAN-CVE-2026-85719

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

IPGhost

IPGhost IPGhost is a strong tool for ethical hackers. It helps you stay private and anonymous online by using the Tor network. This tool automatically changes your IP address, making it hard for anyone to track your online activities. Features Automatic installation of required dependencies Tor,...

CVE-2026-85719 AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719 AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719

AsyncHttpClient (AHC) , a Java library for asynchronous HTTP requests, contains a credential-exposure flaw in its SOCKS proxy handling. NettyRequestFactory and NettyRequestSender attach the Proxy-Authorization header without verifying the request is actually being sent to an HTTP proxy, so creden...

CVE-2026-85719

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

Astra Linux – Vulnerability in Firefox

When Multi-Account Containers was enabled, DNS requests could bypass a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140...

CVE-2026-84381

HTTPX2 is a next-generation HTTP client for Python. Prior to 2.10.0 , the underlying httpcore2 library failed to initiate TLS when a WebSocket connection (wss) was routed through a SOCKS5 proxy , because the TLS upgrade condition only recognized the https scheme. As a result, the WebSocket handsh...