5347 matches found
BDFProxy
BDFProxy 新版本已发布！仅限赞助者！在此获取：https://github.com/sponsors/secretsquirrel 博客：http://secureallthethings.blogspot.com/2017/08/closing-door-end-of-backdoor-factory.html The Backdoor Factory Proxy BDFProxy v0.3.8 仅限安全专业人员与研究人员使用。 现在仅支持 v.0.17 = MITMPROXY = v.0.11 Docker： sudo echo 1...
vapi
vAPI vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios in the means of Exercises. Requirements PHP MySQL PostMan MITM Proxy Installation Docker docker-compose up -d Installation Manual Copying the Code cd git clone...
CVE-2021-1732-EXP-
此存储库没有 README。...
evilwaf
EvilWAF es un proxy transparente avanzado de bypass de firewall MITM y un escáner profundo de vulnerabilidades de WAF diseñado para pruebas de seguridad autorizadas. Opera en la capa de transporte: no toca payloads, cookies ni cabeceras de tus herramientas. Funciona con cualquier herramienta como...
qyvora-toha3ee
toha3ee A local & network security assessment framework written in Go. It is a research and authorised-penetration-testing tool that covers the network assessment pipeline — host and service discovery, enumeration, credential auditing, vulnerability identification and authorised exploitation. Its...
iron-proxy
iron-proxy The problem CI jobs, AI coding agents, and sandboxed containers can make arbitrary outbound requests. A compromised dependency, a prompt injection, or a malicious build step can exfiltrate secrets, phone home, or open a reverse shell. Most teams have zero visibility into what's leaving...
CVE-2026-73636
The Apache HTTP Server 2.4.x is vulnerable to an authentication bypass via a capture-replay attack in the mod_auth_digest module. When AuthDigestNonceLifetime is set to 0, a man-in-the-middle (MITM) attacker can replay captured digest authentication credentials by using crafted requests that trig...
HoneyProxy
此项目已迁移。 HoneyProxy 现已归入 mitmproxy：http://docs.mitmproxy.org/en/stable/mitmweb.html HoneyProxy HoneyProxy 是一个轻量级中间人代理，可帮助您分析 HTTPS 流量流。它专为安全研究人员的需求而设计，支持实时和日志分析。该项目与 mitmproxy 兼容，专注于在取证场景中有用的功能，并提供扩展的可视化能力。 HoneyProxy 以 HTML5 浏览器应用程序的形式运行，底层基于 Python 编写的日志核心。该项目由 Maximilian Hils 主导开发，并在 Guillaume...
morpheus
Morpheus - automated ettercap TCP/IP Hijacking tool Version release: v2.2 - STABLE Author: pedro ubuntu r00t-3xp10it Codename: oneiroi phobetor The mithologic dream greek god Distros Supported: Linux Ubuntu, Kali, Debian, BackBox, Parrot OS Suspicious-Shell-Activity© SSA RedTeam develop @2018 LEG...
ferret
Ferret 面向安全测试人员的协作式 MITM 代理。 从统一界面捕获 HTTP 流量、使用 AI 为请求添加注解、运行 hunt 会话、重放流量并跟踪发现项。 快速开始 · 功能特性 · 截图 · 配置 · 安全 · 参与贡献 快速开始 安装 git clone https://github.com/synlace/ferret.git cd ferret cp .env.example .env optional just up 或者直接使用 Docker Compose： docker compose up --build -d 打开 Ferret 服务| URL ---|---...
CVE-2026-32794
CVE-2026-32794：Apache Airflow Databricks 提供程序中的 TLS 证书验证绕过 关键词： TLS、证书验证、MITM、Kubernetes、Databricks、OAuth、CWE-295、Apache Airflow 目录 概述 漏洞详情 技术分析 攻击链 影响 修复方案 时间线 参考资料 联系方式 免责声明 概述 apache-airflow-providers-databricks 包在与 Kubernetes API 服务器通信进行联合令牌交换时，禁用了 TLS 证书验证。同步和异步代码路径均使用 verify=False /...
oproxy
oproxy oproxy は、ブラウザ、CLI、モバイルアプリ、API クライアント、サービス、テストスイートからのトラフィックを検査、リプレイ、変更するためのローカル HTTP、HTTPS、HTTP/3、WebSocket、SOCKS5 プロキシです。 同じローカルリスナー上で Web UI、API、およびオプションの AI...
SMBetray
SMBetray Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to intercept and modify insecure SMB connections, as well as compromise some secured SMB connections if credentials are known. Background Released at Defcon26 at "SMBetray - Backdooring and Breaking Signatures" I...
SMBetray
SMBetray Version 1.0.0. このツールは、攻撃者が安全でないSMB接続を傍受して変更する能力、および資格情報が既知であれば一部の安全なSMB接続を侵害する能力を示すPoC（概念実証）です。 背景 Defcon26で「SMBetray - Backdooring and Breaking Signatures」として公開されました。...
Check-AAD-Connect-for-CVE-2021-36949-vulnerability
该脚本将检查你的 Azure AD Connect 是否运行在受 CVE-2021-36949 中所述漏洞影响的版本上。受影响的版本为 1.6.4.0 和 2.0.3.0。 请在托管 AAD Connect 安装的服务器上运行该脚本。 该脚本还会检查自动升级功能是否已启用。默认情况下该功能处于启用状态，但正如版本历史中所述，只有部分版本会通过自动升级进行部署。最后一个标记为可自动升级的版本是 2019 年 9 月 28 日的 1.4.25.0，因此微软显然很少使用此功能。因此，请查看手动升级过程的说明，以确保你的 AAD Connect 保持最新。 链接： Microsoft Azure...
CVE-2026-67105
The HCL BigFix Service Management software is affected by an Insecure Communication vulnerability (CWE-319). An attacker with internal network access could intercept unencrypted HTTP traffic between backend services. This allows for the extraction of sensitive data and the execution of man-in-the...
CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
EUVD-2026-90876
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...
CVE-2026-67105 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traffic between backend services, enabling the extraction of sensitive data and potential man-in-the-middle MitM attacks...