chisel-ng

| | | | /| ' | / |/ \ | | ' \ / | | | | | | \ / || | | | | | || | ||/ || | | || , | |/ chisel-ng Una implementación en Rust de chisel para pruebas de penetración y operaciones de equipo rojo. Establece túneles inversos sobre SSH sobre WebSocket sobre TLS, permitiendo a los operadores pivotar a...

chisel

Chisel Chisel es un túnel TCP/UDP rápido, transportado sobre HTTP y asegurado mediante SSH. Un único ejecutable que incluye tanto el cliente como el servidor. Escrito en Go golang. Chisel es principalmente útil para atravesar firewalls, aunque también puede utilizarse para proporcionar un endpoin...

Chisel-Strike

Chisel-Strike Una implementación agresora de Cobalt Strike en .NET cifrada con XOR para chisel, destinada a utilizar un proxy más rápido y capacidades avanzadas de socks5. ¿Por qué escribir esto? En mi experiencia, encontré que los proxies socks4/socks4a son bastante lentos en comparación con sus...

THM-Tempest

TryHackMe — Tempest SOC Level 1 Pathway | Incident Response Investigation Overview Full incident response investigation of a compromised Windows machine. The attacker gained initial access via a malicious Word document exploiting CVE-2022-30190 Follina, established persistence, tunneled through t...

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon

wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Project for Course Works NT205.P21.ANTT Cyber-attack Exploit Windows server 2019 vulnerable to Zerologon with Garble, Chisel, Evil-WinRM, Impacket and a vulnerable Wordpress plugin on a Client machine Video demo:...

pentest-pivoting

Pivoting Guide Table of Contents 1. Important Notes 2. SSH Dynamic Port Forwarding 3. SSH Remote Port Forwarding 4. SSH Local Port Forwarding 5. Double Pivoting 6. sshuttle 7. Chisel 8. Using Burpsuite as Proxy 9. Usefull Resources Important Notes Do not use ICMP echo requests ping to test SOCKS...

chisel v1.12.0

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: promxy, kiali, nri-mssql, opentofu, src-fingerprint, prometheus-adapter, kubernetes-csi-node-driver-registrar, delve, rancher, crossplane-provider-aws-dynamodb, neuvector-scanner, opa-envoy, terragrunt, harbor-registry, pulumi-kubernetes-operator, cass-operator,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: openbao, flux-image-automation-controller, falcoctl, opentofu, opentelemetry-collector, rancher, crossplane-provider-aws-dynamodb, external-dns, terragrunt, pulumi-kubernetes-operator, crossplane-provider-aws-sns, terraform-provider-acme, mattermost, kine,...

GO-2026-5017 vulnerabilities

Vulnerabilities for packages: flux-image-automation-controller, opentofu, opentelemetry-collector, rancher, external-dns, terragrunt, pulumi-kubernetes-operator, mattermost, kine, zot, buildkitd, nerdctl, prometheus-operator, prometheus, kubernetes, osv-scanner, flux, dagger, trivy, pulumi, apko,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: k8sgateway, rabbitmq-messaging-topology-operator, bom, minio-object-browser, flux-image-automation-controller, nri-postgresql, opencost, opentofu, src-fingerprint, terraform, wgcf, dex, kube-vip-cloud-provider, crossplane-provider-aws-dynamodb, git-lfs, external-dns,...

chisel v1.12.0-rc3

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

CVE-2026-48113

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

CVE-2026-48113 Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

CVE-2026-48113

The CVE-2026-48113 entry concerns Chisel, a TCP/UDP tunnel over SSH, where ACL restrictions provided by --authfile are bypassed on post-handshake SSH channels. Authenticated clients can open channels to arbitrary host:port destinations reachable from the server because ACL checks are performed on...

CVE-2026-48113 Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

CVE-2026-48113

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

CVE-2026-48113 Chisel: ACL Bypass via Post-Handshake SSH Channel ExtraData Injection

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

EUVD-2026-52444

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

CVE-2026-48113: Incorrect Authorization

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...