fireprox

FireProx 개요 이점 면책 조항 관리자 크레딧 기본 사용법 설치 스크린샷 기여 개요 웹 호출 시 소스 IP 주소를 숨기거나 지속적으로 변경하는 것은 어렵거나 비용이 많이 들 수 있습니다. 몇 가지 도구가 오랫동안 존재해 왔지만 IP 주소 수가 제한되어 있거나, 비용이 비싸거나, 많은 VPS를 배포해야 했습니다. FireProx는 AWS API Gateway를 활용하여 매 요청마다 소스 IP 주소를 회전시키는 통과 프록시pass-through proxy를 생성합니다! FireProx를 사용하여 대상 서버를 가리키는 프록시...

ssct

ShadowSocks ConnecTion ファイアウォールを一貫して回避するための shadowsocks のラッパーツールです。 クイックスタート 自動接続 このツールを最も簡単に実行する方法は、ターミナルで ssct と入力するだけです。ssct は ishadowsocks から利用可能な shadowsocks サーバーを取得し、自動的に接続します。 特定のサーバーに接続する まず、--list オプションですべての ss サーバーを表示します。 root@kitploit: ssct --list 次に、-n オプションで特定のサーバーに接続します。...

ThunderDNS

ThunderDNS 이 도구는 TCP 트래픽을 DNS 프로토콜을 통해 전달할 수 있습니다. 컴파일 필요 없는 클라이언트 + socks5 지원. 실행 우리 도메인에 NS 레코드 설정하기: DNS 캐시가 지워질 때까지 기다리십시오. 간단한 서버 실행: python3 ./server.py --domain oversec.ru 간단한 서버 실행 Dockerfile: docker run -e DOMAIN='' 간단한 클라이언트 실행 Bash: bash ./bashclient.sh -d oversec.ru -n 간단한 클라이언트 실행...

OAuth-Request-Crafter

OAuth-Request-Crafter OAuth Request Crafterは、OAuth署名で保護されたURLを操作するためのツールです。 Features GET、POST、PUT、DELETEに対応 リクエストをプロキシ その場でURL、パラメータ、ヘッダーを改変 追加のヘッダーとCookieを追加 なぜ？ OAuth署名で保護されたURLを扱う場合、改変やリクエスト発行のたびに、有効な署名とnonceで保護されたパラメータを生成するツールを使い、プロキシに追加してリクエストを成功させる必要があります。これは毎回手動で行う必要があるため、非常に面倒です。 OAuth...

proxify

...

CVE-2021-3019

Lanproxy 目录遍历漏洞 CVE-2021-3019 漏洞描述 Lanproxy是一个将局域网个人电脑、服务器代理到公网的内网穿透工具，支持tcp流量转发，可支持任何tcp上层协议（访问内网网站、本地支付接口调试、ssh访问、远程桌面等等）本次Lanproxy 路径遍历漏洞 CVE-2021-3019通过../绕过读取任意文件。该漏洞允许目录遍历读取/../conf/config.properties来获取到内部网连接的凭据。 漏洞影响 Lanproxy 0.1 网络测绘 header= "Server: LPS-0.1" 漏洞复现...

ProxySqlMap

ProxySqlMap ProxyからSqlMapApiへ 使用方法: config.pyを変更します: 1. Extfilter はフィルタリングする拡張子 2. sqlmap はSQLmapのアドレス 3. url はインターセプトするURL 4. admintoken はsqlmapのadminid プロキシを変更：127.0.0.1:8081 対応ライブラリ: 1. requests 2. baseproxyすでに内蔵されており、インストールは不要です https 対応: アクセス:baseproxy.caでダウンロードできます 出力: sqlsan.txt...

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration

Introduction In February 2026, we discovered a set of malicious activities that had been ongoing since late 2025. These activities involved a RAT module written in Go with proxy capabilities, which served as the main stage of the attack. The attack targeted government and diplomatic entities in...

3DP-MANAGER 信任管理问题漏洞

3DP-MANAGER is a proxy tool developed by DenPiligrim’s individual developers. Versions of 3DP-MANAGER 2.0.1 and earlier contained a vulnerability related to trust management. This vulnerability stemmed from the automatic creation of management accounts with known default credentials during the...

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

Meta on Tuesday said it has made available a tool called WhatsApp Research Proxy to some of its long-time bug bounty researchers to help improve the program and more effectively research the messaging platform's network protocol. The idea is to make it easier to delve into WhatsApp-specific...

Claude Code 安全漏洞

Claude Code is an open source proxy coding tool from Anthropic. A security vulnerability exists in Claude Code versions prior to 1.0.120 that stems from a failure to consider symbolic links when checking permission denial rules, which could lead to bypassing file access restrictions...

[SECURITY] Fedora 42 Update: clash-meta-1.19.12-1.fc42

A rule based network proxy tool, also be known as mihomo...

Claude Code 路径遍历漏洞

Claude Code is an open source proxy coding tool from Anthropic. A path traversal vulnerability exists in versions of Claude Code prior to 0.2.111, which stems from path validation using prefix matching instead of canonical path comparison, which could lead to directory restriction bypass...

CVE-2025-52921

In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to achieve code execution on the server, by uploading a crafted file and then renaming it to have a .php extension by using the Rename Function. This bypasses the initial check that...

CVE-2025-52921

Innoshop up to version 0.4.1 contains a server-side code execution flaw in the File Manager of the admin panel. An authenticated attacker can upload a crafted file and bypass the image-only check by renaming the file to a .php extension (renaming function), enabling a subsequent GET request to ex...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 Jenkins CVE-2024-23897: Arbitrary...

Microsoft Warns of North Korean Attacks Exploiting JetBrains TeamCity Flaw

North Korean threat actors are actively exploiting a critical security flaw in JetBrains TeamCity to opportunistically breach vulnerable servers, according to Microsoft. The attacks, which entail the exploitation of CVE-2023-42793 CVSS score: 9.8, have been attributed to Diamond Sleet aka Labyrin...

WhatsApp Launches a Proxy Tool to Fight Internet Censorship

Amid internet shutdowns in Iran, the encrypted messaging app is introducing proxy connections that can help people get online...

Buffalo TeraStation Network Attached Storage (NAS) 1.66 Authentication Bypass

Exploit Title: Buffalo TeraStation Network Attached Storage NAS 1.66 - Authentication Bypass Date: 2022-08-11 Exploit Author: JORDAN GLOVER Type: WEBAPPS Platform: HARDWARE Vendor Homepage: https://www.buffalotech.com/ Model: TeraStation Series Firmware Version: 1.66 Tested on: Windows 10 An...

Buffalo TeraStation Network Attached Storage (NAS) 1.66 - Authentication Bypass Vulnerability

Exploit Title: Buffalo TeraStation Network Attached Storage NAS 1.66 - Authentication Bypass Exploit Author: JORDAN GLOVER Type: WEBAPPS Platform: HARDWARE Vendor Homepage: https://www.buffalotech.com/ Model: TeraStation Series Firmware Version: 1.66 Tested on: Windows 10 An authentication bypass...