8918 matches found
shad0w
SHAD0W SHAD0W 是一个模块化 C2 框架，旨在成功运行于成熟环境中。 它采用多种方法规避 EDR 和 AV，同时允许操作者继续使用他们熟悉的工具和技术。它由 Python 3.8 和 C 驱动，并使用 Donut 生成有效载荷。通过结合 Donut 与 SHAD0W 的进程注入能力，操作者可以在内存中完全执行 .NET 程序集、DLL、EXE、JS、VBS 或 XSL。大量使用动态解析的系统调用来避免用户态 API 挂钩，利用反 DLL 注入技术使 EDR 难以将其代码加载到信标中，并采用官方 Microsoft 缓解方法来保护生成的进程。 安装与使用说明请参阅 wiki。...
Egress-Assess
Egress-Assess Egress-Assess 是一款用于测试出站数据检测能力的工具。 设置 要设置，请运行附带的安装脚本，或执行以下操作： 1. 安装 pyftpdlib 2. 生成服务器证书，将其保存为 "server.pem"，放在与 Egress-Assess 相同的目录级别。可以使用以下命令完成： openssl req -new -x509 -keyout server.pem -out server.pem -days 365 -nodes 用法 相关博客文章可在此处获取：...
sniffly
Sniffly2 Sniffly2 is a variant of Sniffly which abuses HTTP Strict Transport Security headers and the Performance Timing API in order to sniff your browsing history in Chromium-based browsers. Demo Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS Everywhere...
oproxy
oproxy oproxy es un proxy local HTTP, HTTPS, HTTP/3, WebSocket y SOCKS5 para inspeccionar, reproducir y modificar el tráfico de navegadores, CLIs, aplicaciones móviles, clientes de API, servicios y suites de pruebas. Ejecuta una interfaz web, una API y un asistente de IA opcional en el mismo...
caddy
一个 项目 让每个站点都使用 HTTPS Caddy 是一个可扩展的服务器平台，默认使用 TLS。 版本发布 · 文档 · 获取帮助 技术支持来自 特别感谢： Warp，专为多 AI 代理协同编码而打造 支持 MacOS、Linux 和 Windows 目录 功能特性 安装 从源码构建 用于开发 包含版本信息和/或插件 快速开始 概述 完整文档 获取帮助 关于 功能特性 使用 Caddyfile 实现简单配置 使用原生 JSON 配置实现强大配置 通过 JSON API 实现动态配置 如果你不喜欢 JSON，可以使用配置适配器 默认自动 HTTPS 对公网域名使用 ZeroSSL 和...
nextdns
NextDNS CLI Client NextDNS CLI es una herramienta de línea de comandos que te permite usar el servicio DNS-over-HTTPS DoH de NextDNS con capacidades avanzadas. Aunque las funciones más avanzadas solo funcionarán con NextDNS, este programa puede funcionar como cliente para cualquier proveedor de D...
reproxy
Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...
dnscrypt-proxy
Descripción general Un proxy DNS flexible, con soporte para protocolos DNS cifrados modernos como DNSCrypt v2, incluyendo DNSCrypt Post-Quantum DNSCrypt 2026, DNS-over-HTTPS, DNSCrypt Anonimizado y ODoH Oblivious DoH. Documentación de dnscrypt-proxy ← Empieza aquí Página principal del proyecto...
hoaxshell
hoaxshell ⚡ The latest version of this project is the HoaxShell standalone listener which comes with refreshed payload templates. Wou can also use it directly from https://revshells.com make sure to choose hoaxshell as the listener. ⚠️ As of 2022-10-18, hoaxshell is detected by AMSI...
poc-CVE-2020-5902
PoC para CVE-2020-5902 esto es solo un PoC de muestra para demostrar el problema Limitación Por ahora solo escanea HTTPS; se puede configurar para escanear HTTP o cualquier puertos personalizados. Uso Prueba...
Invoke-SelfSignedWebRequest
Invoke-SelfSignedWebRequest Para el trabajo de InfoSec, usar HTTPS es un mecanismo increíblemente práctico para C2 y para maniobrar dentro del espacio de red objetivo. Además, PowerShell es una herramienta de productividad asombrosa que puede ayudar a un operador a lograr resultados dinámicos. Un...
nginxconfig.io
⚙️ NGINX 配置生成器，火力全开 💉 你配置 NGINX 服务器时唯一需要的工具。 do.co/nginxconfig » 报告错误 · 请求功能 ✨ NGINX Config NGINX 远不止是一个 Web 服务器。你可能早就知道了。 我们热爱 NGINX，原因如下： 低内存占用 高并发能力 异步事件驱动架构 负载均衡 反向代理 带缓存的 FastCGI 支持（PHP） 对静态文件出色的快速处理 支持 SNI 的 TLS/SSL 众多功能伴随相应的配置指令。你现在就可以深入研究 NGINX 文档，或者使用这个工具来了解 NGINX...
mkdev
mkdev HTTPS real para desarrollo local — con TUI y uso compartido en LAN. mkdev ejecuta HTTPS de confianza en .local. Un único binario Go: autoridad de certificados + proxy inverso + /etc/hosts + difusión mDNS + un TUI completo. Qué lo hace diferente: Uso compartido en LAN Marca una ruta como...
Important: Red Hat Security Advisory: bind9.18 security update
An update for bind9.18 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records
A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response,...
bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing
A flaw was found in the BIND resolver. A remote attacker could exploit a vulnerability in the processing of SVCB/HTTPS AliasMode records that reference numerous ServiceMode records. This could lead to the resolver failing to properly release internal resources, causing resource exhaustion. Repeat...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...
getaltname
GSAN - Get Subject Alternative Names GSAN is a tool that can extract Subject Alternative Names SAN found in SSL Certificates directly from https servers which can provide you with DNS names subdomains or virtual servers. It doesn't rely on Certificate Transparency logs, it connects directly to th...
betwixt
Betwixt will help you analyze web traffic outside the browser using familiar Chrome DevTools interface. Installing Download the latest release for your operating system, build your own bundle or run Betwixt from the source code. Setting up In order to capture traffic, you'll have to direct it to...