64 matches found
elite-proxy-finder
elite-proxy-finder 이 스크립트는 몇 달 동안 작동하지 않았습니다. 방금 7/6/15에 수정했습니다. 이제 gatherproxy.com만 사용합니다. 엘리트 익명성L1 HTTP 프록시를 찾은 다음 모두 병렬로 테스트합니다. 각 프록시를 HTTPS 요청을 처리할 수 있는지 확인하기 위해 HTTPS인 하나를 포함한 3개의 IP 확인 URL로 테스트합니다. 그런 다음 프록시 헤더를 확인하여 추가 정보를 누출하지 않는 엘리트 L1 프록시인지 확인합니다. 기본적으로 스크립트는 네 가지 테스트를 모두 통과한 프록시의 IP,...
fireprox
FireProx Overview Benefits Disclaimers Maintainer Credit Basic Usage Installation Screenshots Contributing Overview Being able to hide or continually rotate the source IP address when making web calls can be difficult or expensive. A number of tools have existed for some time but they were either...
http-garden
The HTTP Garden O HTTP Garden é uma coleção de servidores e proxies HTTP configurados para serem combináveis, juntamente com scripts para interagir com eles de uma forma que torna a descoberta de vulnerabilidades muito, muito mais fácil. Para ver algumas demonstrações interessantes das...
CVE-2026-13316
Foreman (HTTP proxies: http_proxies_controller, http_proxy) is affected by a flaw that allows SSRF, enabling access to cloud metadata services in AWS/GCP/Azure environments via modified HTTP parameters. Root cause involves unvalidated/test_url parameters in Foreman’s configuration paths. Impact i...
EUVD-2026-40281
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
CVE-2026-13316 Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config
A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal cloud metadata service on AWS/GCP/Azure environment through foreman component...
[SECURITY] Fedora 43 Update: proxychains-ng-4.17-8.fc43
ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...
[SECURITY] Fedora 42 Update: proxychains-ng-4.17-8.fc42
ProxyChains NG is based on ProxyChains. ProxyChains NG hooks network-related TCP only libc functions in dynamically linked programs via a preloaded DSO dynamic shared object and redirects the connections through one or more SOCKS4a/5 or HTTP proxies. Since Proxy Chains NG relies on the dynamic...
SOAPwn: Pwning .NET Framework Applications through HTTP Client Proxies and WSDL
This is a whitepaper which supplements the BlackHat Europe 2025 presentation called "SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies and WSDL". In this whitepaper, the author presents new exploitation sinks in .NET Framework, which may allow an attacker to achieve either...
EUVD-2005-1859
Malware in sbrugna...
EUVD-2016-5628
Malware in sbrugna...
EUVD-2022-41319
Malicious code in bioql PyPI...
EUVD-2024-51141
Malicious code in bioql PyPI...
RCE-Foryou
RCE-Foryou Python tool for safely testing and exploiting RCE v...
HTTP Request Smuggling (HRS)
webrick is vulnerable to HTTP Request Smuggling. The vulnerability is due to inconsistent parsing of HTTP header terminators in the readheaders method, which allows attackers to smuggle arbitrary HTTP requests when deployed behind certain HTTP proxies...
CVE-2022-38756
A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies...
CVE-2025-4948
A flaw was found in the soupmultipartnewfrommessage function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications. The issue occurs when the library processes specially crafted multipart messages. Due to improper validation, an internal...