sshtunnel

|CircleCI| |AppVeyor| |readthedocs| |coveralls| |version| |pyversions| |license| Author : Pahaz Repo : https://github.com/pahaz/sshtunnel/ Inspired by https://github.com/jmagnusson/bgtunnel, which doesn't work on Windows. See also: https://github.com/paramiko/paramiko/blob/master/demos/forward.py...

sish

sish Tunneling SSH open source pour HTTPS, WSS, TCP, alias et SNI. Si vous aimez la simplicité du partage à la serveo/ngrok mais que vous voulez utiliser du SSH simple et gérer votre propre infrastructure, sish a été conçu pour cela. Aucun client personnalisé requis pour les utilisateurs finaux...

thc-tips-tricks-hacks-cheat-sheet

Любимые советы, трюки и хаки THC Шпаргалка https://thc.org/tips Собрание наших любимых трюков. Многие из этих трюков — не наши. Мы лишь их коллекционируем. Мы показываем трюки «как есть» без объяснения, почему они работают. Вам нужно знать Linux, чтобы понять, как и почему они работают. Есть трюк...

TREVORproxy

TREVORproxy Un proxy SOCKS écrit en Python qui randomise votre adresse IP source. Répartissez vos paquets malveillants en round-robin via des tunnels SSH ou donnez-leur des milliards d'adresses source uniques ! Voir le Blog Post d'accompagnement pour un rant amusant et des démos sympas ! Note : S...

Supershell

Supershell — это C2-платформа удалённого управления с доступом через веб-сервис. Она устанавливает обратный SSH-туннель для получения полностью интерактивной оболочки и поддерживает Payload для различных платформ и архитектур...

Stowaway

Stowaway English Stowaway est un outil de proxy multi-niveaux écrit en Go, spécialement conçu pour les tests de pénétration. Les utilisateurs peuvent utiliser ce programme pour acheminer le trafic externe vers un réseau interne via plusieurs nœuds, contourner les restrictions d'accès au réseau...

minipwner

MiniPwner Un script pour configurer un TP-Link MR3040 sous OpenWRT en une « drop box » de test d’intrusion simple mais puissante. Qu’est-ce que le « MiniPwner » ? Le MiniPwner est une « drop box » de test d’intrusion. Il est conçu comme un petit dispositif, simple mais puissant, qui peut être...

tap

Платформа атак TrustedSec TAP TAP - конструктор удалённых платформ для тестирования на проникновение. Автор: David Kennedy @HackingDave Компания: TrustedSec https://www.trustedsec.com Страница проекта: https://github.com/trustedsec/tap Проект TrustedSec - Copyright 2020 Поддерживаемые операционны...

CVE-2026-74232

Zbtlink L3V28 firmware 3.0.0.4.528, Zbtlink WE826-T2 firmware 19.1101, Zbtlink ZBT-7628 firmware 1.0.0.2.007, Zbtlink ZBT-ZBT7621 firmware 1.0.0.3.001, MoreQuick MQAC-7620, MQAC-7620A, MQAP-7620, MQAP-7620A, and MQAP-7628 firmware 1.0.0.2.000, AP522 firmware 1.0.0.2.014, AP7628 and HC5661A firmwa...

CVE-2026-53545

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...

CVE-2026-53545 Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the DELETE /ssh/tunnel/disconnect/:tunnelName teardown path in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into...

CVE-2026-53545

Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. Prior to 2.3.2 , the DELETE /ssh/tunnel/disconnect/:tunnelName endpoint in src/backend/ssh/tunnel.ts interpolates endpointPort, sourcePort, endpointUsername, and endpointIP into single-quoted pki...

PT-2026-78691

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2 Description An authenticated user can execute arbitrary commands on the source SSH host with the privileges of the connected SSH account. The issue occurs when the application interpolates endpointPort, sourcePor...

CVE-2026-73564

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564 frp: Unauthenticated Remote Denial of Service in the frp SSH Tunnel Gateway via Integer Overflow

frp is a fast reverse proxy. From 0.53.0 until 0.70.1, frp's optional SSH Tunnel Gateway in pkg/ssh/server.go parses an SSH exec channel request by adding 4 to an attacker-controlled four-byte big-endian length. A length of 0xFFFFFFFF makes the uint32 addition wrap to 3, defeats the payload bound...

CVE-2026-73564

The CVE affects frp (frps) with the SSH Tunnel Gateway enabled. A root cause was an integer overflow in parsing an SSH exec channel: the code adds 4 to an attacker-controlled 4-byte length, and 0xFFFFFFFF wraps to 3, causing a bounds check bypass and a panic in TunnelServer.handleNewChannel. When...

CVE-2026-48113

Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. In versions prior to 1.11.5, authenticated clients can bypass --authfile ACL restrictions and tunnel traffic to arbitrary destinations reachable from the server. The ACL is enforced only during the initial handshake against...

Malicious code in @whalent/agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13a01c1162adb93d3960d9e1b1b67095dcf0a1ea72aefa6d471d0abbbabb5d9a The package installs a whalent CLI daemon that opens a persistent WebSocket connection wss:// to a Whalent Memory gateway and, per its own README,...

Malicious code in hey-base32 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bbdc771de9f99f6454831cc2cd8c22f0af88dfeb3ec66a6c4d3b174c860517 The package advertises itself as a zero-dependency base32 encoder/decoder, but its CLI entry point bin/hey-base32.js starts a remote-access tunnel on...