821 matches found
CaddySmith
CaddySmith CaddySmith is a small Python script that reads a Cobalt Strike or Sliver C2 profile and forges a Caddy web server config out of it. The generated Caddyfile turns a regular Linux box into a redirector: legitimate beacon traffic gets reverse-proxied to your team server, and anything else...
QUIC-attacks
QUIC-attacks CVE-2022-30591 The current repository serves the purpose of sharing the scripts we used for educational usage. These attacks were a part of our study check here, and were tested against 6 different QUIC-enabled servers IIS, NGINX, LiteSpeed, Cloudflare, H2O, and Caddy. The quic-loris...
caddy
a project Every site on HTTPS Caddy is an extensible server platform that uses TLS by default. Releases · Documentation · Get Help Powered by Special thanks to: Warp, built for coding with multiple AI agents Available for MacOS, Linux, & Windows Menu Features Install Build from source For...
bbscope
bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build The site will b...
Caddy 2.4.6 - Open Redirect
Caddy 2.4.6 contains an open redirect vulnerability. An attacker can redirect a user to a malicious site via a crafted URL and possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2022-28923 info: name: Caddy 2.4.6 - Open Redirect author: Sascha...
RedCaddy
RedCaddy C2 redirector base on caddy Table of content Overview Feature Note Quick start Step by step References Overview Generate caddyfile with c2 malleable profiles Feature Block IP by GEOIP country Allow requests by header matcher User-agent & IP blacklist Support multiple redirection TeamServ...
CLEANSTART-2026-RS34539 Security fix for GHSA-rjr7-jggh-pgcp applied in: caddy 2.11.4-r1, step 0.30.2-r4
GHSA-rjr7-jggh-pgcp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: caddy: caddy-2.11.7-0.3.hum1 aarch64, s390x, x8664 caddy-2.11.7-0.3.hum1.src src Security Fixes: caddy: CVE-2026-111943...
EUVD-2026-97628
Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root. Unauthenticated attackers can request nested repositories such as user/.git to retrieve Git config, refs, and objects, reconstructi...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: caddy: caddy-2.11.7-0.2.hum1 aarch64, s390x, x8664 caddy-2.11.7-0.2.hum1.src src...
CVE-2026-109326: Exposure of Version-Control Repository to an Unauthorized Control Sphere
Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root. Unauthenticated attackers can request nested repositories such as user/.git to retrieve Git config, refs, and objects, reconstructi...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cur, influxd, loki, falco-exporter, go-fips-md5, crossplane-provider-aws-sns, crossplane-provider-aws-elasticsearch-fips, ceph-csi-operator-fips, keda-http-add-on, external-secrets-fips, flux-source-controller, helm-operator-fips, amass,...
CVE-2026-97032 vulnerabilities
Vulnerabilities for packages: azuredisk-csi, k6, podinfo, vitess, migrate, neuvector-sigstore-interface, grafana-image-renderer, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, terraform-provider-time, grpc-health-probe, logstash-exporter, dapr,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: azuredisk-csi, k6, podinfo, vitess, migrate, neuvector-sigstore-interface, grafana-image-renderer, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, terraform-provider-time, grpc-health-probe, logstash-exporter, dapr,...
CLEANSTART-2026-UM77147 Security fix for GHSA-9g5q-2w5x-hmxf applied in: caddy 2.11.4-r1, step 0.30.2-r4
GHSA-9g5q-2w5x-hmxf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-YO03060 Security fix for GHSA-3fxj-6jh8-hvhx applied in: caddy 2.11.4-r1, step 0.30.2-r4
GHSA-3fxj-6jh8-hvhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KW79982 Security fix for GHSA-259r-337f-4rfw applied in: aws-network-policy-agent 1.1.6-r4, caddy 2.11.4-r1, fabric-peer 2.5.16-r2, fabric-peer 3.1.5-r1, gotenberg 8.33.0-r0, kubernetes-dns-node-cache 1.23.1-r2, step 0.30.2-r4
GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: step-ca, karma, telegraf, caddy, rclone, tkn, step-issuer, dapr, gitness, sftpgo, cloudflared, step-issuer-fips, buf, kyverno-policy-reporter-ui, dapr-fips, step-fips, tkn-fips, gogatekeeper, step-ca-fips, caddy-fips, kyverno-policy-reporter-ui-fips, rclone-fips, ste...
GHSA-XCVF-46F4-XWXF vulnerabilities
Vulnerabilities for packages: step-ca, karma, telegraf, caddy, rclone, tkn, step-issuer, dapr, gitness, sftpgo, cloudflared, step-issuer-fips, buf, kyverno-policy-reporter-ui, dapr-fips, step-fips, tkn-fips, gogatekeeper, step-ca-fips, caddy-fips, kyverno-policy-reporter-ui-fips, rclone-fips, ste...