filtron

Filtron Proxy HTTP inverso para filtrar solicitudes según diferentes reglas. Se puede usar entre el servidor web de producción y el servidor de aplicaciones para evitar abusos del backend de la aplicación. El propósito original de este programa era defender searx, pero puede usarse para proteger...

filtron

Filtron Reverse HTTP proxy to filter requests by different rules. Can be used between production webserver and the application server to prevent abuse of the application backend. The original purpose of this program was to defend searx, but it can be used to guard any web application. Installatio...

socksmon

socksmon 使用您选择的HTTP拦截代理监控任意TCP流量 socksmon是什么？ socksmon是一个基于Twisted的SOCKSv4服务器，通过HTTP代理隧道传输传入的TCP流量。socksmon通过启动一个内部web服务器（端口2357）来实现这一点，将流量发送到中间人代理进行编辑，然后转发到目的地。 socksmon初步支持SSL拦截，这意味着可以使用您选择的拦截代理分析任意SSL加密的TCP流量。 如何使用？...

CocoaDebug

| Introduction Installation Usage Parameters ---|--- Version| Platform| Languages| Screenshot Introduction As similar with Charles in your App. Shake to hide or show the black bubble. Support iPhone device and simulator Share network details via email or copy to clipboard when y...

fake-sms

Fake-SMS 一个简单的命令行工具，您可以使用临时电话号码跳过基于手机号的短信验证，该临时号码充当代理。 最新更新：该工具不再使用 upmasked.com，因为该服务已下线。我们正在使用另一个提供商，它在更多国家/地区提供更多电话号码。编译前请确保拉取主分支。 功能特性： 使用 Go-1.15 编写（启用了模块支持） 提供交互式命令行界面，更易于使用。 提供基于本地文件的数据库，用于保存和管理假电话号码列表，帮助您记忆和复用。 系统要求： Go 编程语言 - 1.15+ 构建方法： 构建过程很简单，就像构建其他 Go 模块一样。请按照以下步骤操作： export...

Ssh Mitm

SSH-MITM SSH-MITM es un proxy SSH de tipo man-in-the-middle para auditorías de seguridad y pruebas de penetración. Soporta la intercepción de sesiones SSH, SCP y SFTP, reenvío de agente, reenvío de puertos y más. Este repositorio era un espejo y ya no se actualiza. Los repositorios oficiales son:...

hsecscan

hsecscan A security scanner for HTTP response headers. Requirements Python 2.x Python Modules os.path argparse sqlite3 urlparse urllib2 urllib json ssl Install $ pip install hsecscan Usage $ hsecscan usage: hsecscan.py -h -P -p -H Header -u URL -R -i -U User-Agent -D DBFILE -d 'POST data' -x PROX...

redshell

RedShell 一个用于红队和渗透测试的交互式命令提示符。自动通过SOCKS4/5代理经由 proxychains 推送命令。可选的 Cobalt Strike 集成可从团队服务器拉取 Beacon 的 SOCKS4/5 代理。活动自动记录到本地 CSV 文件以及（若已配置）Cobalt Strike 团队服务器。 请注意，由于 RedShell 底层使用 proxychains，仅 TCP 流量会被代理。 安装 RedShell 运行在 Python 3.8 上。 安装依赖： pip3 install -r requirements.txt 安装 proxychains-ng...

Security Bulletin: Vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer might affect IBM Storage Defender Copy Data Management

Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in http-proxy-middleware,jackson-databind,uuid,Snakeyaml,Netty,DOMPurify,Micrometer. Vulnerabilities include a crafted Host header that is only a superstring match for a configured host+path key can still route a...

pacpoc

PACPoC: un exploit PoC local para CVE-2019-2205 Para probar este exploit, instala la aplicación "maliciosa" PacTest.apk y haz que exploit.pac esté disponible vía http con, por ejemplo, python -m SimpleHTTPServer. Luego ve a la configuración de proxy en un dispositivo Android, selecciona proxy...

Aresius

Aresius The lightweight, native interception proxy for security testing. Fast. Cross-platform. 100% Open Source. Quick Start · Features · Why Aresius · Install · Roadmap · Community · Releases ⚡ What is Aresius? Aresius is a native, modern desktop HTTP/HTTPS interception proxy designed for...

CVE-2024-0197-POC

CVE-2024-0197-POC Proof of concept for Local Privilege Escalation in Thales Sentinel HASP LDK. I initially wanted to develop one, but eventually that turned out to be unnecessary. There is no race condition to win, and a simple DLL search order hijacking from a known location suffices to attain...

anonym8

@HiroshimanRise anonym8 Amigo de la Privacidad Proxy Transparente a través de TOR, I2P, Privoxy, Polipo y modificar DNS, para una privacidad y seguridad simples y mejores; Incluye funciones de Anonymizing Relay Monitor arm, macchanger, hostname y wipe limpia RAM/caché y espacio de intercambio...

traefik-CVE-2024-45410-poc

Shadow Corp CTF Challenge Bienvenido al desafío Capture the Flag CTF de Shadow Corp. Este desafío pondrá a prueba tus habilidades para identificar y explotar vulnerabilidades relacionadas con cabeceras de seguridad y el comportamiento de proxies HTTP. Tu misión es evadir las protecciones y...

Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges

Summary Axios supports proxy environment variables and evaluates NOPROXY exclusions in the Node.js adapter. CIDR-form NOPROXY entries such as 127.0.0.0/8, 10.0.0.0/8, or 169.254.169.254/32 are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusion...

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls

Summary Axios for Node.js does not apply configured DNS lookup or proxy controls when a request uses httpVersion: 2. The HTTP/1 adapter path wraps and forwards config.lookup, builds normal request options, and applies proxy routing through setProxy. The HTTP/2 path builds a session with...

EUVD-2026-88367

Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls...

certPinningVulnerableOkHttp

Aplicación simple-client de OkHttp vulnerable a CVE-2016-2402 Esto es un fork del simple-client por defecto del proyecto okhttp. Simple-client es una aplicación Java que simplemente hace una petición GET a https://api.github.com y obtiene los nombres de los contribuidores de okhttp. Este fork ha...

GHSA-8988-9CW3-XX77 urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Impact urllib3 supports configuring TLS independently for an HTTPS proxy and the target server. proxysslcontext, proxyasserthostname, and proxyassertfingerprint configure the TLS connection to the proxy. sslcontext and the other target-specific TLS parameters configure the connection to the targe...

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

Impact urllib3 supports configuring TLS independently for an HTTPS proxy and the target server. proxysslcontext, proxyasserthostname, and proxyassertfingerprint configure the TLS connection to the proxy. sslcontext and the other target-specific TLS parameters configure the connection to the targe...