intercept

Support the developer of this open-source project Signal Intelligence Platform A web-based interface for software-defined radio tools. Features Pager Decoding - POCSAG/FLEX via rtlfm + multimon-ng 433MHz Sensors - Weather stations, TPMS, IoT devices via rtl433 Sub-GHz Analyzer - RF capture and...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

dhcpoptinj

DHCP option injector Have you ever wanted to intercept DHCP requests and squeeze in a few extra DHCP options, unbeknownst to the sender? Probably not. However, should the need ever come, dhcpoptinj will hopefully help you. Why There can be many a reason to mangle DHCP requests, although chances a...

proxy2

proxy2 HTTP/HTTPS 代理，单个 Python 脚本即可实现 功能 易于定制 无需外部模块 同时支持 IPv4 和 IPv6 支持 HTTP/1.1 持久连接 支持为 HTTPS 拦截动态生成证书 此脚本适用于 Python 2.7。 你需要安装 OpenSSL 才能拦截 HTTPS 连接。 用法 只需作为脚本运行： $ python proxy2.py 上述命令将在 localhost:8080 上运行代理。 在同一台主机的另一个终端中输入以下命令来验证其是否正常工作。 $ httpproxy=localhost:8080 curl...

joro

Joro 攻撃的セキュリティ専門家向けのWebエクスプロイテーションフレームワーク。インターセプトプロキシ、ブラインド脆弱性検出、Webシェル生成、C2統合、コラボレーションツールを、組み込みのWeb UIを備えた単一バイナリにまとめています。 警告: このツールは、許可されたペネトレーションテストおよびセキュリティ研究のみを目的としています。Joroは、自分が所有するシステム、または明示的な書面によるテスト許可を得たシステムに対してのみ使用してください。コンピュータシステムへの不正アクセスは違法です。Bishop...

CVE-2026-85088

A flaw was found in Apache Thrift. During Transport Layer Security TLS certificate validation, the client libraries improperly evaluate the certificate's Common Name CN when subject alternative name SAN entries do not match the target host. A network-positioned attacker possessing a trusted...

pipe-intercept

pipe-intercept Burp または類似の HTTP プロキシツールを使用して Windows の名前付きパイプ通信を傍受します 名前付きパイプは、Windows 上でのプロセス間通信において非常に広く使われています。Windows リモートプロシージャ コール RPC を含む多くのアプリケーションで使用されています。このツールの目的は、セキュリティ研究者やペネトレーションテスターが、名前付きパイプを使用するアプリケーションに対してセキュリティ評価を行えるようにすることです。 このプロジェクトは、CyberArk Labs による素晴らしい MITMIntercept...

strix

Strix オープンソースのAIペネトレーションテストツール。アプリの脆弱性を見つけて修正する自律型AIハッカー。 !TIP 新機能! StrixはGitHub ActionsやCI/CDパイプラインとシームレスに統合されます。プルリクエストごとに脆弱性を自動スキャンし、安全でないコードが本番環境に到達する前にブロックします - セットアップ不要ですぐに始められます。 Strixの概要 Strixは、まるで本物のハッカー...

Sandroid_Dexray-Intercept

Android 二进制 API 追踪器 Sandroid - Dexray Intercept Dexray Intercept 是动态沙箱 Sandroid 的一部分。其目的是创建运行时配置文件以追踪 Android 应用程序的行为。这是通过使用 frida 来实现的。 安装 只需使用 pip 安装： python3 -m pip install dexray-intercept 这会将 Dexray Intercept 安装为命令行工具 ammm 或 dexray-intercept。 此外，它还会提供一个名为 dexrayintercept 的包。关于如何使用该包的更多信息见下文。...

intercept

!Ask...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

tcpcopy

TCPCopy - A TCP Stream Replay Tool TCPCopy is a TCP stream replay tool for realistic testing of Internet server applications. Getting to Know TCPCopy An Overview of TCPCopy for Beginners A General Overview of TCPCopy Architecture TCPCopy Testing Use Cases TCPCopy Pre-Warming Examples Description...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...

CVE-2026-15911

A flaw was found in confluent-kafka. The HashiCorp Vault Key Management Service KMS integration fails to properly validate Transport Layer Security TLS certificates by default. A remote attacker able to intercept network traffic could exploit this flaw to intercept and decrypt sensitive data or...

CVE-2026-55396

Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 PackBot and 1.7.9 FirstLook allows adjacent unauthenticated attackers to intercept, hijack, or modify control traffic against Teledyne FLIR...

CVE-2026-55394

Teledyne FLIR Aware2 software versions through 6.9.0.2 are vulnerable to unencrypted traffic transmission within the 802.11 network . This flaw allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic of Teledyne FLIR PackBot robots via network sniffing or hijacki...

CVE-2026-67105

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

CVE-2026-67105

The HCL BigFix Service Management software is affected by an Insecure Communication vulnerability (CWE-319). An attacker with internal network access could intercept unencrypted HTTP traffic between backend services. This allows for the extraction of sensitive data and the execution of man-in-the...

PT-2026-103900

HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...

Linux Distros Unpatched Vulnerability : CVE-2026-101905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request optio...