1842 matches found
slinger
slinger投石器 一个为黑客设计的 Rust HTTP 客户端。 浏览文档 » 查看演示 · 报告 Bug · 请求功能 关于项目 Slinger 是一个工作区，包含以下内容： slinger 一个为黑客设计的 Rust 核心 HTTP 客户端库。 可定制的重定向策略 http/https 与 socks5/socks5h 代理 Cookie 存储 原始 Socket 请求 基于 TLS 的 HTTPS slinger-mitm 一个中间人（MITM）代理，支持透明的 HTTPS 流量拦截，类似于 Burp Suite。 自动 CA 证书生成，并改进了证书管理（灵感来自...
CVE-2026-84850
CVE-2026-84850 is an improper certificate validation vulnerability in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier . A network-positioned attacker can intercept and tamper with outbound TLS connections by presenting a spoofed ...
EUVD-2026-79188
Improper certificate validation in the shared HTTP client used by synchronization and integration features in Devolutions Server 2026.2.16 and earlier allows a network-positioned attacker to intercept and tamper with outbound TLS connections via a spoofed or self-signed certificate...
burner-net
BurnerNet Zero-trust, anti-forensic HTTP client. Wipes secrets. Severs traces. CPR in a Stealth Tank. 👻 BurnerNet is a C++20 anti-forensic HTTP client. It provides a fluent, CPR-like API for apps that cannot fully trust the local machine—physically wiping secrets from RAM and severing execution...
forbidden
Forbidden 4xx HTTPレスポンスステータスコードなどをバイパスします。 このツールはPython Requests、PycURL、およびHTTP Clientに基づいています。 Kali Linux v2024.2 64-bitでテスト済みです。 教育目的で作成されました。お役に立てれば幸いです！ 今後の計画: コンソール出力を抑制するsilentオプションの追加。 色付きコンソール出力を無効にするno colorオプションの追加。 hop-by-hop HTTPリクエストヘッダーのテスト追加。 User-Agent HTTPリクエストヘッダーのテスト追加。...
cli
HTTPie CLI: human-friendly HTTP client for the API era...
Retrofit-1
Retrofit Type-safe HTTP client for Android and Java by Square, Inc. For more information please see the website. Download Download the latest JAR or grab via Maven: root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 or Gradle: root@kitploit: implementation 'com.squareup.retrofit2:retrofit:2.4.0...
CVE-2019-17638-Jetty
JETTY Jettyプロジェクトは、eclipse foundationによる100% JavaのHTTPサーバー、HTTPクライアント、およびサーブレットコンテナです。 http://www.eclipse.org/jetty/ Jettyはオープンソースであり、Apache 2.0およびEclipse Public License 1.0のデュアルライセンスが適用されています。Jettyを配布する際には、どちらかのライセンスを選択できます。 JETTYの実行...
aiohttp - Directory Traversal
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessary to specify the root path for static files. Additionally, the option 'followsymlinks' can be used to determine whether to follow symboli...
RustTLSX
RustTLSX 🦀 . 一个面向 Rust 的高级隐身 HTTP 客户端。 专为注重隐私的开发者打造，让你能够完全掌控自己的网络指纹。 看起来像浏览器。行为像浏览器。用 Rust 编写。 致谢与基础 基于bogdanfinn/tls-client 构建 —— 这是业界领先的 TLS 指纹库，受到全球安全专业人士的信赖。我们通过 FFI 绑定使用 bogdanfinn 久经考验的共享库（.dll/.so/.dylib），原因如下： 多年研究 ：数千小时打磨浏览器 TLS 行为的复现 久经考验 ：被全球安全公司和隐私工具用于生产环境 持续更新 ：定期更新以匹配不断演进的浏览器指纹 性能优化...
square__retrofit_CVE-2018-1000850_2-4-0
Retrofit 由Square公司开发的Android和Java类型安全HTTP客户端。 更多信息请参见官方网站。 下载 下载最新JAR包或通过Maven获取： root@kitploit: com.squareup.retrofit2 retrofit 2.4.0 或通过Gradle： root@kitploit: implementation 'com.squareup.retrofit2:retrofit:2.4.0' 开发版本的快照可在Sonatype的snapshots仓库中获取。 Retrofit最低要求Java 7或Android 2.3。 ProGuard...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-90455
This vulnerability involves a reverted update to a bundled HTTP client library within a log-processing component , reintroducing a previously vulnerable version. The root cause is that a prior patch raising the library to a fixed version was undone, restoring the vulnerable code. However, the onl...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
CVE-2026-90455
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
PT-2026-90524
A prior update that raised a bundled HTTP client library to a version remediating known vulnerabilities was later reverted, reintroducing the earlier, vulnerable version into a log-processing component. The only code path in that component using the library issues a request to a single fixed,...
axios: Axios: Prototype pollution allows information disclosure and request manipulation
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as prototype pollution, allows an attacker to inject malicious properties into core JavaScript objects. When another component in the same application environment is compromised and pollutes the system's object...
axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NOPROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the...
golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect
A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header redirected to b.com/ will not send that header to b.com. However, the...