Venom

Venom - Un Proxy Multi-Salto para Probadores de Penetración 简体中文 ｜ English Venom es una herramienta de proxy multinivel desarrollada en Go diseñada para probadores de penetración. Venom permite conectar múltiples nodos y utilizar estos nodos como saltos para construir un proxy multinivel. Los...

ByeDPIAndroid

ByeDPI Android版 中文 | Русский 运行本地 VPN 服务以绕过 DPI（深度包检测）和审查的 Android 应用程序。 该应用程序运行 SOCKS5 代理 ByeDPI 并通过它重定向所有流量。 安装 或者使用 Obtainium 1. 安装 Obtainium 2. 通过 URL 添加应用程序： https://github.com/dovecoteescapee/ByeDPIAndroid 设置 为了绕过某些封锁，您可能需要更改设置。有关各种设置的更多信息，请参阅 ByeDPI 文档。 常见问题解答 我无法配置它。该怎么办？ 您可以在 讨论区 中寻求帮助。...

tunnelx

TunnelX TunnelX es una herramienta ligera de túneles de ingreso diseñada para crear un servidor proxy SOCKS5 seguro para enrutar el tráfico de red. TunnelX está creado para permitir el escaneo de redes internas desde la plataforma ProjectDiscovery, garantizando una conexión aislada y sin...

pentestproxy

PentestProxy 使用 RedSocks 和 DNScrypt 构建隐蔽渗透测试基础设施的脚本。 概述 本仓库包含一组 Bash 脚本，用于协助设置透明代理基础设施。它通过 RedSocks 将流量路由到 SOCKS5 代理，并通过 DNScrypt 加密 DNS 查询。 原始来源： CPH-SEC/CPH-SEC.github.io 要求 Linux（基于 Debian/Ubuntu） 超级用户权限（sudo） python3 iptables nano（或任意编辑器） curl 安装 1. 安装依赖： 运行安装脚本来设置 dnscrypt-proxy 和 resolvconf...

torghost

¿Qué es TorGhost ? TorGhost es un script de anonimización. TorGhost redirige todo el tráfico de internet a través del proxy SOCKS5 de Tor. Las solicitudes DNS también se redirigen a través de Tor, evitando así la fuga de DNS. El script también deshabilita paquetes inseguros que salen del sistema...

hermes

Hermes Hermes 是一个用 Python 编写的轻量级 Linux 代理，专为 Mythic 3.0 及更高版本设计。以众神的信使 Hermes 命名——追求速度与隐秘。 特性 Linux 支持 SOCKS5 代理支持，用于跳板攻击和横向移动 多种 C2 配置文件：HTTP、Notion 使用 RSA-4096 + AES-256-CBC + HMAC-SHA256 的加密密钥交换 EKE AESPSK 支持（预共享密钥，无需密钥交换） 24 个内置命令，涵盖： 侦察 whoami、ps、netstat、ifconfig、systeminfo、env 文件操作...

xtor

xtor Librería de Python para gestionar instancias de Tor mediante programación. Características Inicia nuevos procesos de Tor o conéctate a los existentes Clientes httpx preconfigurados síncronos y asíncronos con proxy SOCKS5 Rotación de identidad con espera opcional de nueva IP Aislamiento de...

ReverseSocks5

ReverseSocks5 Proxy SOCKS5 inverso en Golang. Uso root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -key string Private key file if using TLS on the server -listen string Listen address...

CVE-2023-38545-sample

Descripción rápida Esto muestra el CVE-2023-38545 de cURL. Es tan ligero como pude hacerlo. Configuración Primero, construye la imagen Docker: docker build . -t cveimage A continuación, podemos simplemente ejecutar el archivo de la imagen, creando un contenedor Docker temporal que se eliminará...

GHSA-7MJ9-2MP8-4M2P HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

Summary httpcore2 does not start TLS for wss:// connections routed through a SOCKS5 proxy. The WebSocket opening handshake and all subsequent frames are sent in plaintext through the proxy path, despite the caller selecting the secure wss scheme. The transport flaw affects httpcore2 releases befo...

EUVD-2026-70250

HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies...

MasterHttpRelayVPN-RUST v1.9.37

mhrv-rs — bypass censorship for free, with your own Google account A small program that runs on your computer and lets you visit blocked websites for free, using a Google Apps Script you deploy in your own free Google account. Your ISP only sees encrypted traffic towww.google.com — it can't tell...

CVE-2026-84381

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

CVE-2026-84381

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

CVE-2026-84381

A flaw was found in httpcore2, a component used by HTTPX2. When a remote origin uses WebSocket Secure wss through a SOCKS5 proxy, httpcore2 fails to initiate Transport Layer Security TLS encryption because its upgrade condition only recognizes HTTPS. This vulnerability allows an attacker...

CVE-2026-84381 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

PT-2026-84848

Name of the Vulnerable Software and Affected Versions httpcore2 versions prior to 2.10.0 HTTPX2 versions 2.6.0 through 2.9.1 Description An issue exists where TLS fails to start when a remote origin uses wss WebSocket Secure through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

openSUSE 16: weechat / weechat-devel / weechat-lang / weechat-lua / weechat-perl / etc (openSUSE-SU-2026:21615-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21615-1 advisory. Changes in weechat: - Update to 4.10.0: Added core: add command /theme 1338 core: add built-in light theme, applied automatically on first start...

OPENSUSE-SU-2026:21615-1 Security update for weechat

This update for weechat fixes the following issues: Changes in weechat: - Update to 4.10.0: Added core: add command /theme 1338 core: add built-in "light" theme, applied automatically on first start on light-background terminals 1338 core: add themable flag on configuration options 1338 core: add...

AlmaLinux 8 : nodejs:24 (ALSA-2026:39868)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:39868 advisory. ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...