ProxySqlMap

ProxySqlMap From Proxy to SqlMapApi Usage: Modify config.py: 1. Extfilter is the suffix to filter out 2. sqlmap is the SQLmap address 3. url is the URL to intercept 4. admintoken is sqlmap's adminid Set the proxy: 127.0.0.1:8081 Dependencies: 1. requests 2. baseproxy already bundled, no...

CVE-2021-3019

Vulnerabilidad de recorrido de directorios en Lanproxy CVE-2021-3019 Descripción de la vulnerabilidad Lanproxy es una herramienta de túnel de intranet que actúa como proxy de los ordenadores personales y servidores de la red local hacia la red pública. Admite el reenvío de tráfico TCP y puede...

fireprox

FireProx Resumen Beneficios Descargos Mantenedor Crédito Uso básico Instalación Capturas de pantalla Contribuir Resumen Poder ocultar o rotar continuamente la dirección IP de origen al realizar llamadas web puede ser difícil o costoso. Durante algún tiempo han existido varias herramientas, pero...

ssct

ShadowSocks ConnecTion Una herramienta envolvente para shadowsocks para sortear cortafuegos de manera consistente. Inicio rápido Conexión automática La forma más fácil de ejecutar esta herramienta es simplemente escribir ssct en la terminal, y ssct obtendrá servidores shadowsocks disponibles de...

ThunderDNS

ThunderDNS Esta herramienta puede reenviar tráfico TCP a través del protocolo DNS. Clientes sin compilar + soporte socks5. Ejecutar Configuración de registros NS en nuestro dominio: Espere a que se limpie la caché DNS. Ejecución simple del servidor: python3 ./server.py --domain oversec.ru Ejecuci...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafter es una herramienta que te ayuda a jugar con URLs protegidas por firma OAuth. Features Soporta GET, POST, PUT y DELETE Proxy de la solicitud Modifica URL, parámetros y cabeceras sobre la marcha Añade cabeceras y cookies adicionales ¿Por qué? Cuando se...

proxify

...

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Introduction In February 2026, we discovered a set of malicious activities that had been ongoing since late 2025. These activities involved a RAT module written in Go with proxy capabilities, which served as the main stage of the attack. The attack targeted government and diplomatic entities in...

3DP-MANAGER 信任管理问题漏洞

3DP-MANAGER is a proxy tool developed by DenPiligrim’s individual developers. Versions of 3DP-MANAGER 2.0.1 and earlier contained a vulnerability related to trust management. This vulnerability stemmed from the automatic creation of management accounts with known default credentials during the...

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

Meta on Tuesday said it has made available a tool called WhatsApp Research Proxy to some of its long-time bug bounty researchers to help improve the program and more effectively research the messaging platform's network protocol. The idea is to make it easier to delve into WhatsApp-specific...

Claude Code 安全漏洞

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

[SECURITY] Fedora 42 Update: clash-meta-1.19.12-1.fc42

A rule based network proxy tool, also be known as mihomo...

Claude Code 路径遍历漏洞

Claude Code is an open source proxy coding tool from Anthropic. A path traversal vulnerability exists in versions of Claude Code prior to 0.2.111, which stems from path validation using prefix matching instead of canonical path comparison, which could lead to directory restriction bypass...

CVE-2025-52921

In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. This bypasses the initial check that...

CVE-2025-52921

Innoshop up to version 0.4.1 contains a server-side code execution flaw in the File Manager of the admin panel. An authenticated attacker can upload a crafted file and bypass the image-only check by renaming the file to a .php extension (renaming function), enabling a subsequent GET request to ex...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 Jenkins CVE-2024-23897: Arbitrary...

Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

North Korean threat actors are actively exploiting a critical security flaw in JetBrains TeamCity to opportunistically breach vulnerable servers, according to Microsoft. The attacks, which entail the exploitation of CVE-2023-42793 CVSS score: 9.8, have been attributed to Diamond Sleet aka Labyrin...

WhatsApp Launches a Proxy Tool to Fight Internet Censorship

Amid internet shutdowns in Iran, the encrypted messaging app is introducing proxy connections that can help people get online...

Buffalo TeraStation Network Attached Storage (NAS) 1.66 Authentication Bypass

Exploit Title: Buffalo TeraStation Network Attached Storage NAS 1.66 - Authentication Bypass Date: 2022-08-11 Exploit Author: JORDAN GLOVER Type: WEBAPPS Platform: HARDWARE Vendor Homepage: https://www.buffalotech.com/ Model: TeraStation Series Firmware Version: 1.66 Tested on: Windows 10 An...

Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass Vulnerability

Exploit Title: Buffalo TeraStation Network Attached Storage NAS 1.66 - Authentication Bypass Exploit Author: JORDAN GLOVER Type: WEBAPPS Platform: HARDWARE Vendor Homepage: https://www.buffalotech.com/ Model: TeraStation Series Firmware Version: 1.66 Tested on: Windows 10 An authentication bypass...