iox

iox English | 中文 Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. When I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, wh...

CVE-2021-3019

CVE-2021-3019 LanProxy 目录遍历 Lanproxy 是一种内网穿透工具，可将局域网个人电脑和服务器代理到公网。 它支持 TCP 流量转发，并支持任何 TCP 上层协议（访问内网网站、本地支付接口调试、SSH 访问、 远程桌面等）。LanProxy 0.1 版本存在路径遍历漏洞，可能导致读取 conf/config.properties 以获取内网连接凭据。 Shodan 搜索："Server: LPS-0.1" 读取配置文件 root@kitploit: GET /../conf/config.properties HTTP/1.1 Host:...

CVE-2021-3019

Lanproxy ディレクトリトラバーサル脆弱性 CVE-2021-3019 脆弱性の説明 Lanproxyは、ローカルエリアネットワーク上のPCやサーバーをパブリックネットワークにプロキシするためのイントラネットトンネリングツールです。TCPトラフィック転送をサポートし、任意のTCP上位層プロトコル（イントラネットWebサイトへのアクセス、ローカル決済インターフェースのデバッグ、SSHアクセス、リモートデスクトップなど）をサポートします。今回のLanproxy パストラバーサル脆弱性（CVE-2021-3019）は、../...

lanproxy 安全漏洞

lanproxy is an intranet penetration tool for proxying LAN PCs and servers to the public network by ffay's personal developer. A security vulnerability exists in lanproxy v.0.1 and earlier versions, which stems from a directory traversal vulnerability that allows remote attackers to obtain sensiti...

NPS 授权问题漏洞

NPS is ehang-io open source a lightweight , high-performance , powerful intranet penetration proxy server . NPS v0.26.10 before the version has a security vulnerability , the vulnerability stems from an attacker can bypass authentication by constantly generating and sending authentication keys an...

Iox - Tool For Port Forward &Amp; Intranet Proxy

Tool for port forward & intranet proxy, just like lcx/ew, but better Why write? lcx and ew are awesome, but can be improved. when I first used them, I can't remember these complicated parameters for a long time, such as tran, slave, rcsocks, sssocks.... The work mode is clear, why do they design...