striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC...

KsDumper

🔴 This repo is outdated due to the Capcom driver being patched 🔴 Thanks to mastercodeon314 there's now a port working on Windows 11. Enjoy ! https://github.com/mastercodeon314/KsDumper-11 KsDumper I always had an interest in reverse engineering. A few days ago I wanted to look at some game...

striptls

striptls - 감사 프록시 STARTTLS 제거 공격의 poc 구현 범용 TCP 프록시 구현 및 감사 도구 로, 프로토콜 독립적인 ssl/tls 가로채기와 SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP, IRC에 대한 STARTTLS 제거 공격을 수행합니다...

watermarks-remover

root@kitploit: | | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover エージェントスキル + 標準ライブラリのみの Python サービスで、テキストおよびファイルから複数ベンダーの AI 由来マーク を除去します — あなたが所有する コンテンツのプライバシーと衛生のために。このスキルはシンクライアントです。HTTP 経由で機構を操作するため、エージェントホストに Python...

phantom-frida

phantom-frida phantom-frida は、Android Frida Server と Gadget をソースからビルドし、対象となる一連の観測可能なランタイム識別子を変更します。これはビルダー兼検証ハーネスであり、すべてのアプリケーション固有の検出方法が打ち負かされることを約束するものではありません。 現在の互換性ターゲットは、Android 上の Frida 17.16.4 です。他の Frida バージョンは、ソース契約、完全なビルド、およびルート化デバイスの受理が繰り返されるまでは意図的に未検証として扱われます。...

aegis

Aegis 커널 모드 프로세스 보호 드라이버로, ObRegisterCallbacks를 사용하여 핸들에서 메모리 접근 권한을 제거합니다. 핸들 생성에 후킹하여 PROCESSVMREAD/WRITE/OPERATION을 무단 접근 시도에서 제거하는 기본적인 구현입니다. 참고: GIF가 애니메이션되지 않으면 Imgur에서 직접 보기 개요 드라이버는 고도 321123에서 OB 콜백을 등록하고 OBOPERATIONHANDLECREATE 및 OBOPERATIONHANDLEDUPLICATE 작업을 가로챕니다. 프로세스가 보호 대상에 대한 핸들...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

CVE-2019-13498

CVE-2019-13498 脆弱性タイトル: MITM - HSTS欠如による認証情報とコンテンツ操作 日付: 07/10/2019 脆弱性作者: Furqan Khan ベンダーホームページ: https://www.oneidentity.com/ ソフトウェアリンク: https://www.oneidentity.com/products/cloud-access-manager/ バージョン: 8.1.3 テスト環境: Kali Linux , Windows 7 ,Ubantu 16.04 MITM攻撃を実施し、ユーザー名、パスワード、OTPを盗むために、bettercap...

mysslstrip

mysslstrip mysslstrip는 MySQL 트래픽을 MITM하고 SSL/TLS를 제거하는 방법을 보여주는 Python 기반 개념 증명 도구로, CVE-2015-3152에 해당합니다. 사용법 mysslstrip.py -h -p LISTENPORT -i LISTENINTERFACE dest 예시 출력 root@kitploit: root@duo1 python2.7 mysslstrip.py -p 3307 127.0.0.1:3306 2015-04-29 21:33:14+0000 - Log opened. 2015-04-29...

inference-gateway-PoC

inference-gateway: セキュリティアドバイザリ...

GHSA-FQ95-V8XC-JM3V Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Affected: github.com/fabiolb/fabio = 1.6.6 through 1.7.1 and master HEAD c75f8a6. Summary The v1.6.6 fix for CVE-2025-48865 sweeps the client Connection header against a hardcoded allowlist protectHeaders proxy/httpheaders.go:28-36 containing only the 7 X-Forwarded family headers. Fabio also...

Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Affected: github.com/fabiolb/fabio = 1.6.6 through 1.7.1 and master HEAD c75f8a6. Summary The v1.6.6 fix for CVE-2025-48865 sweeps the client Connection header against a hardcoded allowlist protectHeaders proxy/httpheaders.go:28-36 containing only the 7 X-Forwarded family headers. Fabio also...

FRAGNESIA-Charan-cve-2026-46300

Charantej 아키텍처: 강화된 컨테이너 스테이징 및 시스템 콜 원격 측정 연구소 엔터프라이즈급, 심층 방어 컨테이너 격리 및 런타임 보안 원격 측정 프레임워크. Cisco 수석 사이버보안 아키텍트의 관점에서 설계된 Charantej 아키텍처는 스테이징 런타임을 격리하고, 시스템 콜 표면을 제한하며, 호스트 수준 감사를 사용하여 실시간 커널 원격 측정을 계측함으로써 현대 리눅스 컨테이너 배포를 보호합니다. High-Level Design HLD Charantej 아키텍처는 격리, 최소 권한 격리 및 대역 외 모니터링을 적용...

redact

redact ログ、テレメトリ、その他いかなる第三者向け出力先に到達する前に、自由形式の文字列から認証情報らしき内容を除去します phpboyscout Go toolkit の一部 — go-tool-base から抽出された、小さなフレームワーク非依存のGoモジュール集です。ドキュメント: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact は、信頼済みと非信頼の可観測性サーフェス — テレメトリベンダー、ログ集約サービス、メトリクスストア — の境界...

refresh

Refresh このコンテナは、F5ルーターにおけるCVE-2022-1388の脆弱な機能をエミュレートし、RCEを可能にします。 CVE-202201388は、異なる認証メカニズムと、ヘッダーを削除するプロキシングとの間の複雑な関係に起因し、Webアプリの管理エンドポイントへの不適切なアクセスを許可します。 競技者は、この脆弱性を悪用するウェブリクエストをボットを使用して送信する必要があります。 ビルド root@kitploit: docker build -t refresh . 実行 root@kitploit: docker run -p 80:80 refresh 悪用...

CVE-2026-62987 Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Fabio is an HTTPS and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/httpheaders.go uses protectHeaders for a hardcoded set of forwarded headers but omits the operator-configured ClientIPHeader, TLSHeader, and RequestID names. In...

CVE-2026-62987

Fabio (an HTTP/S and TCP router for Consul-managed applications) versions 1.6.6 through 1.7.2 contain an incomplete fix for CVE-2025-48865 . The protectHeaders logic in proxy/http_headers.go covers a hardcoded set of forwarded headers but omits operator-configured ClientIPHeader , TLSHeader , and...

PT-2026-93300

The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on that identifier when deciding whether to strip HTML from stored entry values, allowing unauthenticated visitors to have markup rendered in th...

reasongate v0.4.0

ReasonGate A self-hostable gate that inspects the text going into and out of an LLM and returns an explainable allow / flag / block decision with a machine-readable audit record for every call. What this is The open-source core is rule-based. It does four things: recognizes known prompt-injection...

CVE-2026-69212 Http4s: FollowRedirect middleware leaks credentials over https->http same-authority redirect

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, The FollowRedirect client middleware strips Authorization and Cookie headers only when a redirect changes authority, but authority comparison excludes the URI scheme. A same-authority redirect from HTTPS to HTTP...