wa-tunnel

wa-tunnel - TCP Tunneling through Whatsapp This is a Baileys based piece of code that lets you tunnel TCP data through two Whatsapp accounts. This can be usable in different situations, for example network carriers that give unlimited whatsapp data or airplanes where you also get unlimited social...

ssh-auditor

SSH Auditor 功能特性 ssh-auditor 将自动： 重新检查所有已知主机，当新凭证添加时。它只会检查新凭证。 对任何发现的新主机排队进行完整凭证扫描。 对任何 SSH 版本或密钥指纹发生变化的已知主机排队进行完整凭证扫描。 尝试执行命令，并尝试隧道 TCP 连接。 使用每个凭证的 scaninterval（默认为 14 天）重新检查每个凭证。 它的设计使得你可以每小时从 cron 运行 ssh-auditor discover + ssh-auditor scan 来进行持续审计。 演示 早期演示展示所有功能 演示展示改进的日志输出 用法 安装 $ brew instal...

http_bridge

HTTP 桥接 动机 我编写这个程序作为概念验证，用来测试能够通过简单的HTTP请求（如PUT、PATCH、POST、GET）发送TCP流数据包的想法，而不使用像CONNECT方法这样的代理方式。同时也是一个练习，以训练我在Rust语言上的新手技能。 描述 这个工具由两部分组成：服务器和客户端。 服务器 服务器只是一个PHP文件，包含一些使用TCP套接字保持有状态连接并处理传入HTTP请求的逻辑；目前这个逻辑只在Linux服务器上工作。 我已经用apache+modphp、nginx+php-fpm和内置的PHP服务器（php -S）测试过它。 客户端...

Boomerang

Boomerang Boomerang es una herramienta para exponer múltiples servidores internos a la web/nube mediante túneles HTTP+TCP. El servidor expondrá 2 puertos en la nube. Uno será donde herramientas como proxychains puedan conectarse a través de socks, el otro será para que el agente se conecte. El...

socksmon

socksmon 使用您选择的HTTP拦截代理监控任意TCP流量 socksmon是什么？ socksmon是一个基于Twisted的SOCKSv4服务器，通过HTTP代理隧道传输传入的TCP流量。socksmon通过启动一个内部web服务器（端口2357）来实现这一点，将流量发送到中间人代理进行编辑，然后转发到目的地。 socksmon初步支持SSL拦截，这意味着可以使用您选择的拦截代理分析任意SSL加密的TCP流量。 如何使用？...

ABPTTS

一条通往太阳的黑色路径 （用于 Web 应用服务器的 TCP 隧道） https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS 使用一个 Python 客户端脚本和一个 Web 应用服务器页面/包1，通过 HTTP/HTTPS 连接将 TCP 流量隧道传输到 Web 应用服务器。换句话说，在任何可以部署 Web shell 的地方，现在都应该能够建立完整的 TCP 隧道。这使得可以通过 Web 应用服务器进行 RDP、交互式...

File-Tunnel

文件隧道 通过文件服务器隧道传输 TCP 连接。 支持的完整文件系统列表可在此处查看。 下载 适用于 Windows、Linux 和 Mac 的便携式可执行文件可在发行版部分找到。 示例 1 - 绕过防火墙 您希望从主机 A 连接到主机 B，但中间有防火墙阻挡。不过，两台主机都可以访问同一个共享文件夹。 主机 A ft.exe -L 5000:127.0.0.1:3389 --write "\server\share\1.dat" --read "\server\share\2.dat" 该命令在端口 5000 上监听连接。当收到连接时，会通过文件隧道将其转发到...

CVE-2026-91143 goproxy through 15.3 Authentication Bypass via CONNECT

goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT tunnel requests, allowing unauthenticated clients to bypass credential requirements. Attackers can issue CONNECT requests to establish tunnels through the authenticated proxy without providing credentials, enabling...

File-Tunnel v3.5.2

File Tunnel Tunnel TCP connections through a file server. A full list of supported file systems can be found here. Download Portable executables for Windows, Linux and Mac can be found over in the releases section. Example 1 - Bypassing a firewall You'd like to connect from Host A to Host B, but ...

File-Tunnel v3.5.0

File Tunnel Tunnel TCP connections through a file server. A full list of supported file systems can be found here. Download Portable executables for Windows, Linux and Mac can be found over in the releases section. Example 1 - Bypassing a firewall You'd like to connect from Host A to Host B, but ...

Denial Of Service (DoS)

servicemesh-proxy is vulnerable to denial of service. The vulnerability exists when configured for :ref:upstream tunneling and the downstream connection disconnects while the the upstream connection or http/2 stream is still being established allowing an attacker to disconnects during upstream...

CVE-2021-43826 Crash when tunneling TCP over HTTP in Envoy

Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a crash occurs when configured for :ref:upstream tunneling and the downstream connection disconnects while the the upstream connection or http/2 stream is still being established...

ABPTTS - TCP Tunneling Over HTTP/HTTPS For Web Application Servers

A Black Path Toward The Sun TCP tunneling over HTTP for web application servers https://www.blackhat.com/us-16/arsenal.htmla-black-path-toward-the-sun Ben Lincoln, NCC Group, 2016 ABPTTS uses a Python client script and a web application server page/package1 to tunnel TCP traffic over an HTTP/HTTP...

Boomerang - A Tool To Expose Multiple Internal Servers To Web/Cloud

Boomerang is a tool to expose multiple internal servers to web/cloud using HTTP+TCP Tunneling. The Server will expose 2 ports on the Cloud. One will be where tools like proxychains can connect over socks, another will be for the agent to connect. The agent can be executed on any internal host. Th...

Eviloffice - Inject Macro And DDE Code Into Excel And Word Documents (Reverse Shell)

Win python script to inject Macro and DDE code into Excel and Word documents reverse shell Features: Inject malicious Macro on formats: docm, dotm, xlsm, xltm Inject malicious DDE code on formats: doc, docx, dot, xls, xlsx, xlt, xltx Python2/Python3 Compatible Tested: Win10 MS Office 14.0...

Catchyou - FUD Win32 Msfvenom Payload Generator

Fully Undetectable Win32 MSFVenom Payload Generator meterpreter/shell reverse tcp Author: github.com/thelinuxchoice/catchyou Twitter: twitter.com/linuxchoice Please, don't upload to VirusTotal! Usehttps://antiscan.me Features: Fully Undetectable Win32 MSFVenom Payload meterpreter/shell reverse tc...

PivotSuite - A Network Pivoting Toolkit

PivotSuite is a portable, platform independent and powerful network pivoting toolkit, Which helps Red Teamers / Penetration Testers to use a compromised system to move around inside a network. It is a Standalone Utility, Which can use as a Server or as a Client. PivotSuite as a Server : If the...

Tunnel TCP connections over HTTP: Tunna

Tunnel TCP connections over HTTP Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled environments. In a fully firewalled inbound and outbound connections restricted – except the webserver port. The...