632 matches found
bbscope
bbscope.com 用于聚合来自 HackerOne、Bugcrowd、Intigriti 和 YesWeHack 的漏洞赏金计划范围的 Web 界面和 API。 快速开始 Docker root@kitploit: cd website cp .env.example .env 编辑 .env — 至少设置 POSTGRESPASSWORD 和你的平台凭证 docker compose up -d --build 站点将通过 https://yourdomain.com 访问（Caddy 通过 Let's Encrypt 自动处理 HTTPS）。 Cloudflare DNS 挑战...
caddy
一个 项目 每个网站都运行在 HTTPS 上 Caddy 是一个可扩展的服务器平台，默认使用 TLS。 发布 · 文档 · 获取帮助 基于 特别感谢： Warp，专为使用多个AI代理进行编码而构建 适用于 MacOS、Linux 和 Windows 菜单 特性 安装 从源码构建 开发 包含版本信息和/或插件 快速开始 概述 完整文档 获取帮助 关于 特性 简单配置 使用 Caddyfile 强大配置 使用其 原生 JSON 配置 动态配置 使用 JSON API 配置适配器 如果您不喜欢 JSON 默认自动 HTTPS ZeroSSL 和 Let's Encrypt 用于公共域名...
CaddySmith
CaddySmith CaddySmith 是一个小型 Python 脚本，它读取 Cobalt Strike 或 Sliver C2 配置文件，并从中生成一个 Caddy Web 服务器配置。生成的 Caddyfile 将普通的 Linux 机器变成一个重定向器：合法的 Beacon 流量被反向代理到你的团队服务器，其他一切（扫描器、搜索引擎爬虫、蓝队探针、随机 curl 请求）都被弹到一个诱饵 URL。 我写这个是因为 Caddy 是一个比 Apache 更友好的 Web 服务器，可以快速搭建：单一静态二进制文件，自动 Let's Encrypt 证书，无需 a2enmod 之类的操...
QUIC-attacks
Ataques QUIC CVE-2022-30591 Este repositorio tiene el propósito de compartir los scripts que utilizamos con fines educativos. Estos ataques fueron parte de nuestro estudio consulte aquí y fueron probados contra 6 servidores diferentes compatibles con QUIC IIS, NGINX, LiteSpeed, Cloudflare, H2O y...
Caddy 2.4.6 - Open Redirect
Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...
RedCaddy
RedCaddy Redirector de C2 basado en caddy Tabla de contenido Resumen Características Nota Inicio rápido Paso a paso Referencias Resumen Genera caddyfile con perfiles maleables de C2 Características Bloquear IP por país GEOIP Permitir peticiones mediante coincidencia de cabeceras Lista negra de...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to nginx / Caddy / the app, tails access logs, and tells you when a site is being probed or exploited. If this process dies, the site keeps serving. It is not Wazuh, not OSSEC, and not a WAF. The command is gpewebdefender. Hosts, tokens, map pins,...
GHSA-X3G7-QRWC-F6C5 Ember has unneutralized terminal escape/control sequences from Caddy logs injected into the operator's TUI
Summary Ember's interactive TUI renders fields taken from the monitored Caddy server's access logs — most notably the request URI — straight to the operator's terminal without neutralising terminal escape or control sequences CWE-150. Those log fields are populated from arbitrary, unauthenticated...
PT-2026-80742
Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...
GHSA-F3QQ-49M6-RW8F
creationtimestamp| type| source ---|---|--- 2026-08-19 08:31:37+00:00| seen| https://gist.github.com/alon710/db3f4019c2372dbb6dfede560d6093f7...
CVE-2026-45135
A flaw was found in Caddy. This vulnerability stems from unsafe handling of Unicode characters within the FastCGI component, specifically when processing request paths containing non-ASCII bytes. An attacker capable of placing content into files served via FastCGI can exploit this by crafting a...
GO-2025-4180 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step-ca-fips, caddy, step-ca, step-issuer-fips, step-fips, step-issuer, caddy-fips, step...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step-ca-fips, caddy, step-ca, step-issuer-fips, step-fips, step-issuer, caddy-fips, step...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: dapr-fips, gogatekeeper, rclone-fips, step-issuer-fips, karma, gitness, sftpgo, kyverno-policy-reporter-ui-fips, tkn, caddy, step-issuer, caddy-fips, rclone, buf, step-ca-fips, kyverno-policy-reporter-ui, tkn-fips, telegraf, step-ca, cloudflared, step-fips, step, dap...
GO-2023-2113 vulnerabilities
Vulnerabilities for packages: prometheus-adapter, kubevela, k3s, caddy, up, metrics-server-fips, kube-oidc-proxy, kubernetes-fips, rancher-webhook-fips, rancher-webhook, buildkitd, kubernetes...
GO-2024-3302 vulnerabilities
Vulnerabilities for packages: buf, k3s, caddy, traefik, spegel, eks-distro-fips, frp, kubernetes-dns-node-cache-fips, kubernetes-dns-node-cache, traefik-fips, cloudflared, q, eks-distro, caddy-fips...
GO-2025-4181 vulnerabilities
Vulnerabilities for packages: caddy, caddy-fips...