CVE-2026-108764

A Server-Side Request Forgery (SSRF) vulnerability exists in Apache Kylin affecting versions 4.0.0 through 5.0.4 . The vulnerability specifically impacts the job-driver UI proxy and primarily affects kylin job services directly exposed to a public network. To remediate this issue, users are recom...

CVE-2026-108764 Apache Kylin: job-driver UI proxy SSRF

Server-Side request forgery SSRF vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: from 4.0.0 through 5.0.4. Users are recommend...

Prox-Ez

Prox-Ez: The Swiss Army Knife of HTTP auth This HTTP proxy handles all HTTP authentications on your behalf. It supports NTLM EPA channel binding and service binding, kerberos, pass-the-hash, overpass-the-hash pass-the-key and pass-the-ticket TGT and TGS. Related articles: Dissecting NTLM EPA with...

ClickOnceBlobber

ClickOnce AppDomainManager Injection Toolkit Weaponize signed .NET ClickOnce applications for initial access by hijacking a dependency DLL via AppDomainManager injection and loading a C port of ProxyBlob Agent. Ships with a C port of ProxyBlob — a SOCKS5 proxy that tunnels all traffic through Azu...

mcpguard-dynamic

MCPGuard-Dynamic Kernel-level sandboxing for LLM agent tool calls made through the Model Context Protocol MCP. MCPGuard sits as a transparent proxy between an MCP client the agent / runner and an MCP server subprocess, applying three layered defenses to every tool invocation. The lowest layer is...

secbutler

Essential utilities for pentester, bug-bounty hunters and security researchers Features • Usage • Installation • License • secbutler is a utility tool made for pentesters , bug-bounty hunters and security researchers that contains all the most used and tedious stuff commonly used while performing...

sh4d0wup

sh4d0wup % docker run -it --rm ghcr.io/kpcyrd/sh4d0wup:edge -h Usage: sh4d0wup OPTIONS Commands: bait Start a malicious update server front Bind a http/https server but forward everything unmodified infect High level tampering, inject additional commands into a package tamper Low level tampering,...

OpenClawMachines

OpenClaw Machines Run as many isolated OpenClaw agents as you need, on hardware you own. OpenClaw Machines is an open-source platform for runningOpenClaw in secure AI sandboxes on your own infrastructure. A control plane orchestrates your hosts, and each agent runs in its own Firecracker microVM ...

Neo

The Neo C2 Framework A modular server-client architecture post-exploitation framework built for collaborative agent management in red team operations and security testing. Enables flexibility by allowing operators to add their own extension modules Installation • Agents & Stagers • Profiles &...

mkdev

mkdev Real HTTPS for local dev — with a TUI and LAN sharing. mkdev runs trusted HTTPS on .local. A single Go binary: cert authority + reverse proxy + /etc/hosts + mDNS broadcast + a full TUI. What makes it different: LAN sharing Mark a route shared, hit https://app.local from your phone or any...

Valid8Proxy

If you find this GitHub repo useful, please consider giving it a star! ⭐️ .png Valid8Proxy is a fast and efficient tool designed for fetching, validating, and storing working proxies HTTP, HTTPS, SOCKS4, SOCKS5, and Mixed. Perfect for web scraping, OSINT, automation, or network testing. 🚀 Run...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

public-research

Public Research Open source research and talks on threat intelligence, fingerprinting, and fraud detection. Talks 10/25/2024 - Anti-Fraud W3 Community Group - An Emprical Analysis of Residential Proxies 03/27/2025 - Anti-Fraud W3 Community Group - Mitigating Fingerprint Impersonation 10/23/2025...

mariadb-13-rce-lab

MariaDB 13.0.1-rc RCE Lab Remote code execution on the unmodified, stock MariaDB 13.0.1-rc Docker image as uid 999 mysql. Two exploit variants: Variant| File| Requirements| Notes ---|---|---|--- Pure SQL recommended| exploitpuresql.py| a low-priv MariaDB account + TCP| no host access, no docker, ...

mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement

A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statemen...

proxy

git-pkgs proxy A caching proxy for package registries. Speeds up package downloads by caching artifacts locally, reducing bandwidth usage and improving reliability. Version Cooldown Most supply chain attacks rely on speed: a malicious version gets published and consumed by automated pipelines...

socks5

socks5 Socks5/Socks5h server and client This project is to add protocol support for the Bridge, or it can be used alone Usage API Documentation Example Support for the CONNECT command Support for the BIND command Support for the ASSOCIATE command License Licensed under the MIT License. See LICENS...

CVE-2023-38545

CVE-2023-38545: Curl Vulnerability Proof of Concept This repository contains a Proof of Concept PoC designed to test systems for the CVE-2023-38545 vulnerability. The vulnerability affects the curl utility, specifically versions between 7.69.0 and 8.3.1, and is related to the handling of HTTP...

mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement

A flaw was found in MariaDB. An authenticated attacker with low privileges can achieve privilege escalation by modifying the password of another database account. This vulnerability occurs because the database server checks incorrect authorization privileges when processing a GRANT PROXY statemen...

oproxy

oproxy oproxy is a local HTTP, HTTPS, HTTP/3, WebSocket, and SOCKS5 proxy for inspecting, replaying, and modifying traffic from browsers, CLIs, mobile apps, API clients, services, and test suites. It runs a web UI, API, and optional AI assistant on the same local listener, so you can capture...