trajan

Trajan: CI/CD Security Scanner Trajan scans CI/CD pipelines for security vulnerabilities that attackers use to compromise software supply chains. It supports GitHub Actions, GitLab CI, Azure DevOps, Jenkins, and JFrog. What it does Trajan parses workflow YAML files, builds dependency graphs, runs...

headscale

An open source, self-hosted implementation of the Tailscale control server. Join our Discord server for a chat. Note: Always select the same GitHub tag as the released version you use to ensure you have the correct example configuration. The main branch might contain unreleased changes. The...

Stowaway

Stowaway Stowaway is a multi-hop proxy tool for security researchers and penetration testers. Stowaway lets you proxy external traffic through multiple hops into a target internal network, bypassing access restrictions, building a tree-like node topology, and managing it easily. Thanks for the...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

msldap

🚩 Sponsors If you like this project, consider purchasing licenses of OctoPwn, our full pentesting suite that runs in your browser! For notifications on new builds/releases and other info, hop on to our Discord msldap LDAP library for MS AD 🚩 Runs in the browser This project, alongside with many...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...

Chisel-Strike

Chisel-Strike A .NET XOR encrypted cobalt strike aggressor implementation for chisel to utilize faster proxy and advanced socks5 capabilities. Why write this? In my experience I found socks4/socks4a proxies quite slow in comparison to its socks5 counterparts and a lack of implementation of socks5...

smtp-tunnel-proxy

📧 SMTP Tunnel Proxy A high-speed covert tunnel that disguises TCP traffic as SMTP email communication to bypass Deep Packet Inspection DPI firewalls. ┌─────────────┐ ┌─────────────┐ ┌─────────────┐ ┌──────────────┐ │ Application │─────▶│ Client │─────▶│ Server │─────▶│ Internet │ │ Browser │ TCP ...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

hackEmbedded

hackebds 🔗中文 readme Overview hackebds is a toolkit for embedded-device payload generation, encrypted shell workflows, SOCKS5 proxy tunneling, and device information lookup. The current branch uses a pure ELF workflow for encrypted shell and proxy features: reverseshellfile + encryptedshellserver ...

ThunderDNS

ThunderDNS This tool can forward TCP traffic over DNS protocol. Non-compile clients + socks5 support. Run Setting up NS records on our domain: Please wait for clearing DNS-cache. Simple server run: python3 ./server.py --domain oversec.ru Simple server run Dockerfile: docker run -e DOMAIN='' Simpl...

CVE-2018-9995-POC

CVE-2018-9995-POC CVE-2018-9995 POC python CVE-2018-9995Bata.py -proxy 127.0.0.1:9487 -f Importdata.txt -o Outputdata.txt -p 12 -f ※일괄 가져오기 파일 데이터 소스 형식 예: 43.255.172.204:9200 192.168.168.5:1234 -o ※출력 파일 -proxy ※sock5 전달 프록시 -p ※사용할 멀티스레드 코어 수...

Venom

Venom - A Multi-hop Proxy for Penetration Testers 简体中文 ｜ English Venom is a multi-hop proxy tool developed for penetration testers using Go. You can use venom to easily proxy network traffic to a multi-layer intranet, and easily manage intranet nodes. This tool is limited to security research and...

Go-RouterSocks

Router socks The next step after compromising a machine is to enumerate the network behind. Many tools exist to expose a socks port on the attacker's machine and send all the traffic through a tunnel to the compromised machine. When several socks ports are available, we have to manage different...

OnionHarvester

OnionHarvester V2 A small TOR Onion Address harvester for checking if the address is available or not. The program uses the TOR local socks5 proxy for finding all the Onion Addresses which are alive and ports 80 and 443 are available. Details about the project and TOR onion harvesting is publishe...

ByeDPIAndroid

ByeDPI for Android English | Русский Android application that runs a local VPN service to bypass DPI Deep Packet Inspection and censorship. This application runs a SOCKS5 proxy ByeDPI and redirects all traffic through it. Installation Or use Obtainium 1. Install Obtainium 2. Add the app by URL:...

http_bridge

Http Bridge Motivation I've wrote this program as a proof of concept to test the idea of be able to send tcp stream packets over simple http request like PUT, PATCH, POST, GET, without use a proxy way like CONNECT method. Also as a practice exercise to train my novice skill on rust language...

CVE-2023-38545

CVE-2023-38545: Curl 취약점 PoCProof of Concept 이 저장소는 CVE-2023-38545 취약점에 대한 시스템 테스트를 위해 설계된 PoCProof of Concept를 포함하고 있습니다. 이 취약점은 curl 유틸리티, 특히 7.69.0과 8.3.1 사이의 버전에 영향을 미치며 HTTP 리디렉션 처리와 관련이 있습니다. 사전 요구 사항 필수 소프트웨어: curl 기능 포트 1080에서 실행되는 SOCKS5 프록시 서버 포트 8000에서 실행되는 HTTP 서버 취약점 테스트를 위한 자동화 스크립트...

CVE-2023-38545

CVE-2023-38545: Curl 취약점 개념 증명PoC 이 저장소에는 CVE-2023-38545 취약점에 대한 시스템 테스트를 위해 설계된 개념 증명PoC이 포함되어 있습니다. 이 취약점은 curl 유틸리티, 특히 7.69.0과 8.3.1 사이의 버전에 영향을 미치며 HTTP 리디렉션 처리와 관련이 있습니다. 전제 조건 필요한 소프트웨어: curl 기능 1080 포트에서 실행되는 SOCKS5 프록시 서버 8000 포트에서 실행되는 HTTP 서버 취약점을 테스트하는 자동화 스크립트 아키텍처 PoC는 두 가지 주요 구성 요소...

bifrost

Bifrost 고성능 HTTP/HTTPS/SOCKS5 프록시 서버 Language: 中文 | English · Documentation site Bifrost는 Rust로 작성된 고성능, AI 친화적 프록시 서버로, Whistle에서 영감을 받았습니다. 요청 가로채기, 규칙 수정, TLS 가로채기, 스크립트 확장, 트래픽 조회, 요청 재생 및 Web UI 관리 기능을 제공합니다. 빠른 시작 CLI를 설치하며, macOS와 Windows에서는 데스크톱 App도 함께 자동 설치됩니다: 방법 1: 스크립트로 설치 macOS /...