CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header

CVE-2026-1010 – WebSocket Connection Smuggling Overview A reverse proxy and backend disagree on how to parse an HTTP request with a malformed WebSocket upgrade header. The proxy treats it as one request, while the backend interprets it as two, allowing an attacker to smuggle a hidden request. Thi...

GHSA-8QX7-J2V2-X6Q5 Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

AI Disclosure This vulnerability was discovered via deepseek-v4-pro1m for finding potential vulnerabilities / inconsistencies in the code base. I made the AI check if Caddy is compliant with various RFCs, incl. 7230. I also used it to help write the PoC, since it was honestly much faster than...

Caddy has an RFC 7230 §6.1 compliance issue / Hop-by-hop headers that leak through

AI Disclosure This vulnerability was discovered via deepseek-v4-pro1m for finding potential vulnerabilities / inconsistencies in the code base. I made the AI check if Caddy is compliant with various RFCs, incl. 7230. I also used it to help write the PoC, since it was honestly much faster than...

CloakQuest3r

If you find this GitHub repo useful, please consider giving it a star! ⭐️ CloakQuest3r is a Python-based security research tool designed to analyze and identify potential origin IP exposure of websites protected by Cloudflare and other reverse proxy or CDN services. Websites often rely on...

redi

redi Automated redirector setup compatible with HTTP RATs CobaltStrike Beacon, meterpreter, etc, and CobaltStrike DNS Beacon. The script can either set up nginx reverse proxy, or DNS proxy/forwarder using dnsmasq. If HTTPS was selected, it will automatically setup letsencrypt certbot and obtain...

lbmap

Proof of concept scripts for advanced HTTP fingerprinting, presented at OWASP AppSecAsia 2012. These scripts should be considered a PoC or alpha quality. Suggestions, recommendations, signatures, pathces and flames are welcome via http://www.github.com/wireghoul/lbmap. The following tools are...

rathole

rathole English | 简体中文 A secure, stable and high-performance reverse proxy for NAT traversal, written in Rust rathole, like frp and ngrok, can help to expose the service on the device behind the NAT to the Internet, via a server with a public IP. rathole Features Quickstart Configuration Logging...

Cloak

Cloak is a pluggable transport that enhances traditional proxy tools like OpenVPN to evade sophisticated censorship and data discrimination. Cloak is not a standalone proxy program. Rather, it works by masquerading proxied traffic as normal web browsing activities. In contrast to traditional tool...

BounceBack

BounceBack ↕️🤫 Stealth redirector for your red team operation security. Overview BounceBack is a powerful, highly customizable and configurable reverse proxy with WAF functionality for hiding your C2/phishing/etc infrastructure from blue teams, sandboxes, scanners, etc. It uses real-time traffic...

ezXSS

ezXSS is an easy way for penetration testers and bug bounty hunters to test blind Cross Site Scripting. ezXSS is a tool that is designed to help find and exploit cross-site scripting XSS vulnerabilities. One of the key features of ezXSS is its ability to identify and exploit blind XSS...

cover

Cover Keep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow. Install · Quick start · Policies · Monitoring · Pi / OMP · Security Cover is a bidirectional privacy proxy for AI coding agents. It replaces matched sensitive values locally wit...

reproxy

Reproxy is a simple edge HTTPs server / reverse proxy supporting various providers docker, static, file, consul catalog. One or more providers supply information about the requested server, requested URL, destination URL, and health check URL. It is distributed as a single binary or as a docker...

log4jail

log4jail 🛡️ A fast firewall reverse proxy with TLS HTTPS and swarm support for preventing Log4J Log4Shell aka CVE-2021-44228 attacks. 📖 Table of Contents Introduction Installation Quick Start Proof of Concept For Pentesters ℹ️ Introduction log4jail is a quick and dirty solution to block Log4Shell...

Mimic

Mimic Frameless Browser‑in‑the‑Browser BitB - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for realistic phishing simulations, easily injected via reverse proxy. ⚠️ Warning : Only use this software according to your current legislation. Misuse of this...

mkdev

mkdev Real HTTPS for local dev — with a TUI and LAN sharing. mkdev runs trusted HTTPS on .local. A single Go binary: cert authority + reverse proxy + /etc/hosts + mDNS broadcast + a full TUI. What makes it different: LAN sharing Mark a route shared, hit https://app.local from your phone or any...

pomerium

Pomerium is an identity and context-aware reverse proxy. Pomerium builds secure, clientless connections to internal web apps and other services without a corporate VPN. Pomerium is: Easier with clientless access. Faster by being tunnel-free and deployed where your apps and services are. Safer...

cve-2026-20896-gitea-poc

CVE-2026-20896 Gitea Docker Auth Bypass Checker Authorized red team / pentest operations only. This repository contains a minimal checker for CVE-2026-20896, an authentication bypass in official Gitea Docker images up to and including 1.26.2 when reverse-proxy authentication is enabled. What...

hakoriginfinder

hakoriginfinder Tool for discovering the origin host behind a reverse proxy. Useful for bypassing WAFs and other reverse proxies. How does it work? This tool will first make a HTTP request to the hostname/URL that you provide and store the response, then it will make a request to every IP address...

nginx-CVE-2017-7529

Nginx out-of-bounds read cache vulnerability CVE-2017-7529 Vulnerability Principle References: https://cert.360.cn/detailnews.html?id=b879782fbad4a7f773b6c18490d67ac7 http://galaxylab.org/cve-2017-7529-nginx%E6%95%B4%E6%95%B0%E6%BA%A2%E5%87%BA%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/ When Nginx acts ...

Evilginx3-Phishlets

Updated Evilginx3 Phishlets I've dedicated substantial time and effort to create and update new phishlets for Evilginx3. In this repository, you'll find many custom Evilginx phishlets, finely crafted and updated to suit real-world applications. Want to Learn How to Create Advanced Phishlets from...