fronthunter

FrontHunter FrontHunter 是一款用于测试大量域名的工具，以识别可用于域名前置的候选域名。 域名前置？真的吗？ 我知道，我知道……域名前置已经相当陈旧了。但事实是，作为 C2 基础设施中的一个附加功能，它仍然很有用。在域名方面，仍然有很多不错的候选者哦。; 特性 测试域名列表是否支持域名前置 多线程检查，加快处理速度 可自定义 HTTP 请求参数（标头、超时等） 支持代理使用 基于内容的验证 详细的结果报告 安装 root@kitploit: 克隆仓库 git clone https://github.com/st3rven/fronthunter.git cd...

MasterHttpRelayVPN

MasterHttpRelayVPN YouTube 安全搜索 和直播流媒体 现已默认绕过并正常工作 ，因此你无需为此使用 youtubeviarelay 或 Cloudflare/VPS 的 exitnode。 语言： 英语 | 波斯语 / فارسی 波斯语版本由 AI 生成。建议使用英文版本。 Telegram 频道 📣： https://t.me/MasterDnsVPN | @MasterDnsVPN Telegram 群组 📣： https://t.me/MasterDnsVPNGroup | @MasterDnsVPNGroup ❤️ 特别感谢 Abolix...

mhr-cfw

MHR-CFW MITM 域前端 HTTP 中继 + Cloudflare Worker 出口 English| Persian ---|--- 工作原理 1 - GAS + Cloudflare Worker 出口 root@kitploit: 客户端 - 本地中继 - Google/CDN 前端 - GAS Google Apps Script 中继 - Cloudflare Worker - 出口 | +- 向网络 DPI 过滤器显示 www.google.com 2 - GAS + Cloudflare Worker 中间层 + 自托管上游转发器中继出口 root@kitploi...

sandbox-runtime

Anthropic Sandbox Runtime srt A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. srt uses native OS sandboxing primitives sandbox-exec on macOS, bubblewrap on Linux and proxy-based network filterin...

chkdfront

检查域名前端（chkdfront） chkdfront 通过测试目标域名（前端域名）与您的域名前端域名，来检查您的域名前端是否正常工作。 root@kitploit: MMMMMMMMMMMMMWNK0kdolc;,' ;KMMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMMMMMN0xl;'. lNMMMMMMMMMMMMMMMMMMMMMMMMMM MMMMMWKxc'. .kWMMMMMMMMMMMMMMMMMMMMMMMMM MMN0o;. ;XMMMMMMMMMMMMMMMMMMMMMMMMM Ol,. .xWMMMMMMMMMMMMMMMMMMMMMMMM '...

hideNsneak

欢迎使用 hideNsneak。 该应用程序帮助渗透测试人员管理攻击基础设施，提供快速部署、管理和拆除各种云服务的界面。这些服务包括虚拟机、域名前端、Cobalt Strike服务器、API网关和防火墙。 Black Hat Arsenal 视频演示 - https://youtu.be/8YTYScLn7pA 目录 概述 本地运行 命令 组织 贡献 许可 概述 hideNsneak 提供了一个简单的界面，使渗透测试人员能够构建和管理基础设施——所需开销极低。 hideNsneak 可以： 部署、销毁 和 列出 1. 通过 EC2 和 Digital Ocean 的云实例（Google...

DomainFrontDiscover

DomainFrontDiscover 用于发现可进行域前置的CloudFront域的脚本和结果 关于此过程的详细说明请访问 https://www.peew.pw/blog/2018/2/22/how-i-identified-93k-domain-frontable-cloudfront-domains ConfirmedFrontableDomains.txt 一份包含93k+个经确认可用于通过CloudFront进行域前置的域列表（2018年2月22日）。 ConfirmedFrontableDomains-Alexa1M.txt...

CVE-2026-48491

A flaw was found in Traefik, an HTTP reverse proxy and load balancer. This vulnerability allows an unauthenticated client to bypass mutual Transport Layer Security TLS enforcement, a security measure that verifies both client and server identities. The bypass occurs due to an issue in Traefik's...

CVE-2026-48491 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard...

CVE-2026-48491 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard...

CVE-2026-48491

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard...

CVE-2026-48491 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Traefik is an HTTP reverse proxy and load balancer. From 3.7.0 until 3.7.3, there is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard...

CVE-2026-48491

CVE-2026-48491 (Traefik) describes a high-severity vulnerability in Traefik 3.7.0–3.7.3 where SNICheck ignores wildcard TLSOptions mappings. An unauthenticated client can complete a TLS handshake with a permissive SNI on the same entrypoint and then send a Host header targeting a wildcard-protect...

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SNICheck process. An attacker can gain unauthorized access to protected backends by completing a TLS handshake using a permissive SNI and then sending an HTTP Host header...

GHSA-5R4W-85F3-PW66 Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Summary There is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard host rule such as Host.example.com with stricter TLS options for...

Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

Summary There is a high severity vulnerability in Traefik's domain-fronting protection SNICheck that allows an unauthenticated client to bypass mutual TLS enforced through wildcard router TLSOptions. When a router uses a wildcard host rule such as Host.example.com with stricter TLS options for...

PT-2026-50143

Name of the Vulnerable Software and Affected Versions Traefik versions 3.7.0 through 3.7.2 Description An issue in the SNICheck domain-fronting protection allows an unauthenticated client to bypass mutual TLS mTLS enforced through wildcard router TLSOptions. When a router uses a wildcard host rul...

Mozilla Firefox < 63.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 63.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-26 advisory. - When manipulating user events in nested loops while opening a document through script, it is possible to...

Vulnerabilities fixed in Fortinet FortiOS and FortiProxy

Fortinet has fixed vulnerabilities in FortiOS and FortiProxy. The vulnerabilities include a stack-based buffer overflow that allows authenticated attackers to execute unauthorized code via specially crafted CLI commands. In addition, there are issues with incorrect certificate validation that all...

CVE-2025-25255

An Improperly Implemented Security Check for Standard vulnerability CWE-358 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0.1 through 7.0.22 may allow an unauthenticated proxy user ...