chisel

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. root@kitploit: Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 80...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

shootback

shootback shootback는 NAT나 방화벽 뒤에 있는 대상을 접근할 수 있게 해주는 역방향 TCP 터널입니다. 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. 800개의 동시 연결에서 CPU 1% 미만, 메모리 8MB를 사용합니다. slaver는 단일 파일이며 python2.7/3.4+ 표준 라이브러리만 필요합니다. 작동 방식 일반적인 사용 시나리오 1. 집에서 회사/학교 컴퓨터인터넷 IP 없음에 접속 从家里连接公司或学校里没有独立外网IP的电脑 2. 사설 네트워크/사이트를 공개 使内网或内网站点能从公网访问 3...

bore

bore Rust로 작성된 현대적이고 간단한 TCP 터널로, 표준 NAT 연결 방화벽을 우회하여 로컬 포트를 원격 서버에 노출합니다. 이것이 전부입니다: 그 이상도 이하도 아닙니다. root@kitploit: 설치 Rust 필요, 아래 대안 참조 cargo install bore-cli 로컬 머신에서 bore local 8000 --to bore.pub 이렇게 하면 로컬 포트 localhost:8000이 bore.pub:를 통해 공개 인터넷에 노출됩니다. 여기서 포트 번호는 무작위로 할당됩니다. localtunnel 및...

wa-tunnel

wa-tunnel - Whatsapp를 통한 TCP 터널링 이는 Baileys를 기반으로 한 코드로, 두 개의 Whatsapp 계정을 통해 TCP 데이터를 터널링할 수 있습니다. 이것은 다양한 상황에서 사용할 수 있습니다. 예를 들어, 무제한 Whatsapp 데이터를 제공하는 네트워크 통신사나 무제한 소셜 네트워크 데이터를 제공하는 비행기 등에서 사용할 수 있습니다. WS 기반 멀티 디바이스 Whatsapp 라이브러리인 Baileys를 사용하므로, 예를 들어 Termux를 사용하여 향후 안드로이드에서도 사용할 수 있습니다...

firecat

firecat 詳細については、以下を参照してください： http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat は、侵害されたネットワークからリバース TCP トンネルを外部に開通させることができるペネトレーションテストツールです。トンネルが確立されると、外部ホストから、侵害されたネットワーク内の任意のシステムの任意のポートに接続できるようになります。ネットワークが NAT ゲートウェイや厳格なファイアウォールの背後にある場合でも同様です。これは、侵害された Web サーバーの NAT...

AZL-91457 CVE-2026-13318 affecting package kubevirt 1.8.4-1

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

CVE-2026-13318

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

[SECURITY] Fedora 40 Update: chisel-1.10.0-1.fc40

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 39 Update: chisel-1.10.0-1.fc39

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 41 Update: chisel-1.10.0-1.fc41

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 36 Update: chisel-1.7.7-4.fc36

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 35 Update: chisel-1.7.7-3.fc35

A fast TCP tunnel over HTTP...

Fedora: Security Advisory for chisel (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for chisel (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for chisel (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: chisel-1.7.7-2.fc35

A fast TCP tunnel over HTTP...

Exposure of Sensitive Information to an Unauthorized Actor in fgribreau/node-request-retry

Exposure of Sensitive Information to an Unauthorized Actor in FGRibreau/node-request-retry Reported on Feb 10 2022 | Timothee Desurmont Vulnerability type: CWE-200 Bug Cookies are leaked to external sites. Description js request$mysite/redirect.php?url=$attacker/, options When fetching a Redirect...

Invoke-SocksProxy - Socks Proxy, And Reverse Socks Server Using Powershell

Creates a local or "reverse" Socks proxy using powershell. The local proxy is a simple Socks 4/5 proxy. The reverse proxy creates a tcp tunnel by initiating outbond SSL connections that can go through the system's proxy. The tunnel can then be used as a socks proxy on the remote host to pivot int...