67 matches found
http-garden
The HTTP Garden The HTTP Garden 是一个可组合的 HTTP 服务器和代理的集合，附带用于与它们交互的脚本，让发现漏洞变得容易得多。想看看使用 HTTP Garden 可以发现哪些漏洞的酷炫演示，请查看我们的 ShmooCon 2024 演讲。 致谢 我们感谢 Galois、Trail of Bits、Narf Industries 和 Dartmouth College 的朋友们，让这个项目成为可能。 本材料基于国防高级研究计划局（DARPA）在合同号 HR0011-19-C-0076 下支持的工作。 入门 依赖 0. The HTTP Garden 运行在...
elite-proxy-finder
elite-proxy-finder 这个脚本几个月来一直无法正常工作。我刚刚在 7/6/15 修复了它。现在只使用 gatherproxy.com。 查找精英匿名（L1）HTTP 代理，然后对所有代理进行并行测试。每个代理都会用 3 个 IP 检测 URL 进行测试，其中一个为 HTTPS，以确保它能处理 HTTPS 请求。接着检查代理头部，确认它是一个不会泄露任何额外信息的精英 L1 代理。默认情况下，脚本只会打印通过全部四项测试的代理的 IP、请求时间和国家/地区代码，但你可以通过 -a（--all）选项查看所有结果，包括任何测试中出现的错误。 依赖要求： 已在 Kali 1.0....
fireprox
FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...
CVE-2026-13316
Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
PT-2026-53837
A flaw has been found in foreman when HTTP parameters are modified in http proxies controller and http proxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
[SECURITY] Fedora 43 Update: proxychains-ng-4.17-8.fc43
ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...
[SECURITY] Fedora 42 Update: proxychains-ng-4.17-8.fc42
ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...
SOAPwn: Pwning .NET Framework Applications through HTTP Client Proxies and WSDL
This is a whitepaper which supplements the BlackHat Europe 2025 presentation called "SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies and WSDL". In this whitepaper, the author presents new exploitation sinks in .NET Framework, which may allow an attacker to achieve either...
EUVD-2005-1859
Malware in sbrugna...
EUVD-2016-5628
Malware in sbrugna...
EUVD-2022-41319
Malicious code in bioql PyPI...
EUVD-2024-51141
Malicious code in bioql PyPI...
RCE-Foryou
RCE-Foryou Python tool for safely testing and exploiting RCE v...
HTTP Request Smuggling (HRS)
webrick is vulnerable to HTTP Request Smuggling. The vulnerability is due to inconsistent parsing of HTTP header terminators in the readheaders method, which allows attackers to smuggle arbitrary HTTP requests when deployed behind certain HTTP proxies...
CVE-2022-38756
A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies...
CVE-2025-4948
A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...