CVE-2023-38545

CVE-2023-38545：Curl漏洞概念验证 该仓库包含一个概念验证（PoC），用于测试系统是否存在CVE-2023-38545漏洞。该漏洞影响curl工具，特别是7.69.0至8.3.1版本之间，与HTTP重定向的处理有关。 先决条件 所需软件：curl 功能 运行在1080端口的SOCKS5代理服务器 运行在8000端口的HTTP服务器 用于测试漏洞的自动化脚本 架构 该PoC包含两个主要组件： SOCKS5代理服务器：监听1080端口，将所有传入请求转发到HTTP服务器。 HTTP服务器：监听8000端口，负责生成触发漏洞的有效载荷。 使用说明...

pingtunnel master-d7cd0d6ab5f18e7d8d050385e8d240b3b2f41e6c

Pingtunnel Pingtunnel is a tool that sends TCP/UDP traffic over ICMP. Note: This tool is only to be used for study and research, do not use it for illegal purposes Usage & Detailed Documentation 📖 For detailed documentation, seeUSAGE.md: includes complete command-line parameters, configuration fi...

voidsec-proxy

voidsec-proxy root@kitploit: ██╗ ██╗ ██████╗ ██╗██████╗ ███████╗███████╗ ██████╗ ██║ ██║██╔═══██╗██║██╔══██╗██╔════╝██╔════╝██╔════╝ ██║ ██║██║ ██║██║██║ ██║███████╗█████╗ ██║ ╚██╗ ██╔╝██║ ██║██║██║ ██║╚════██║██╔══╝ ██║ ╚████╔╝ ╚██████╔╝██║██████╔╝███████║███████╗╚██████╗ ╚═══╝ ╚═════╝ ╚═╝╚═════...

burp-vps-proxy

Burp VPS Proxy: Proxies en la nube fáciles para Burp Suite Primeros pasos » Características · Proveedores · Avisos legales 📖 Acerca de Burp VPS Proxy es una extensión de Burp Suite que permite la creación y eliminación automáticas de proxies SOCKS5 ascendentes en proveedores de nube populares des...

tunnelx

TunnelX TunnelX 是一款轻量级的入口隧道工具，旨在创建安全的 SOCKS5 代理服务器，用于路由网络流量。TunnelX 专为从 ProjectDiscovery 平台 启用内部网络扫描而设计，确保连接无缝且隔离。 功能特性 通过 SOCKS5 代理实现安全的网络入口。 使用您的 ProjectDiscovery API 密钥 进行认证连接。 为内部扫描和发现提供隔离的流量路由。 工作原理 TunnelX 使用您的 ProjectDiscovery API 密钥创建安全的入口隧道，通过 SOCKS5 代理实现隔离的内部扫描。 您可以通过指定不同的网络名称，在不同的网络上运行...

pentestproxy

PentestProxy 使用 RedSocks 和 DNScrypt 构建隐蔽渗透测试基础设施的脚本。 概述 本仓库包含一组 Bash 脚本，用于协助设置透明代理基础设施。它通过 RedSocks 将流量路由到 SOCKS5 代理，并通过 DNScrypt 加密 DNS 查询。 原始来源： CPH-SEC/CPH-SEC.github.io 要求 Linux（基于 Debian/Ubuntu） 超级用户权限（sudo） python3 iptables nano（或任意编辑器） curl 安装 1. 安装依赖： 运行安装脚本来设置 dnscrypt-proxy 和 resolvconf...

torghost

What is TorGhost ? TorGhost is an anonymization script. TorGhost redirects all internet traffic through SOCKS5 tor proxy. DNS requests are also redirected via tor, thus preventing DNSLeak. The scripts also disables unsafe packets exiting the system. Some packets like ping request can compromise...

hermes

Hermes Hermes 是一个用 Python 编写的轻量级 Linux 代理，专为 Mythic 3.0 及更高版本设计。以众神的信使 Hermes 命名——追求速度与隐秘。 特性 Linux 支持 SOCKS5 代理支持，用于跳板攻击和横向移动 多种 C2 配置文件：HTTP、Notion 使用 RSA-4096 + AES-256-CBC + HMAC-SHA256 的加密密钥交换 EKE AESPSK 支持（预共享密钥，无需密钥交换） 24 个内置命令，涵盖： 侦察 whoami、ps、netstat、ifconfig、systeminfo、env 文件操作...

xtor

xtor 用于以编程方式管理 Tor 实例的 Python 库。 特性 启动新的 Tor 进程或连接到现有进程 预配置的 httpx 客户端（同步 + 异步），使用 SOCKS5 代理 身份轮换，可选等待新 IP 流隔离，用于流量分离 电路和流管理 出口节点信息（国家、带宽、标志） 临时隐藏服务（.onion） 事件监听器（电路、流、带宽事件） TorPool，用于管理多个实例，支持轮询和随机选择 命名实例，可通过 CLI 管理 自定义异常层次结构，实现精确的错误处理 安装 先决条件 Linux（Debian/Ubuntu）： root@kitploit: sudo apt-get...

ReverseSocks5

ReverseSocks5 Proxy SOCKS5 inverso en Golang. Uso root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -key string Private key file if using TLS on the server -listen string Listen address...

GHSA-7MJ9-2MP8-4M2P HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

Summary httpcore2 does not start TLS for wss:// connections routed through a SOCKS5 proxy. The WebSocket opening handshake and all subsequent frames are sent in plaintext through the proxy path, despite the caller selecting the secure wss scheme. The transport flaw affects httpcore2 releases befo...

EUVD-2026-70250

HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies...

MasterHttpRelayVPN-RUST v1.9.37

mhrv-rs — bypass censorship for free, with your own Google account A small program that runs on your computer and lets you visit blocked websites for free, using a Google Apps Script you deploy in your own free Google account. Your ISP only sees encrypted traffic towww.google.com — it can't tell...

CVE-2026-84381

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

CVE-2026-84381

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

CVE-2026-84381

A flaw was found in httpcore2, a component used by HTTPX2. When a remote origin uses WebSocket Secure wss through a SOCKS5 proxy, httpcore2 fails to initiate Transport Layer Security TLS encryption because its upgrade condition only recognizes HTTPS. This vulnerability allows an attacker...

CVE-2026-84381 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpcore2/sync/socksproxy.py and src/httpcore2/httpcore2/async/socksproxy.py when the remote origin uses wss through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

PT-2026-84848

Name of the Vulnerable Software and Affected Versions httpcore2 versions prior to 2.10.0 HTTPX2 versions 2.6.0 through 2.9.1 Description An issue exists where TLS fails to start when a remote origin uses wss WebSocket Secure through a SOCKS5 proxy because the TLS upgrade condition only recognizes...

openSUSE 16: weechat / weechat-devel / weechat-lang / weechat-lua / weechat-perl / etc (openSUSE-SU-2026:21615-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21615-1 advisory. Changes in weechat: - Update to 4.10.0: Added core: add command /theme 1338 core: add built-in light theme, applied automatically on first start...

OPENSUSE-SU-2026:21615-1 Security update for weechat

This update for weechat fixes the following issues: Changes in weechat: - Update to 4.10.0: Added core: add command /theme 1338 core: add built-in "light" theme, applied automatically on first start on light-background terminals 1338 core: add themable flag on configuration options 1338 core: add...