phantom-frida

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...

striptls

striptls - auditing proxy poc implementation of STARTTLS stripping attacks A generic tcp proxy implementation and audit tool to perform protocol independent ssl/tls interception and STARTTLS stripping attacks on SMTP, POP3, IMAP, FTP, NNTP, XMPP, ACAP and IRC. Python2! 🏆 Trophies CVE-2016-0772 -...

striptls

striptls - 审计代理 STARTTLS 剥离攻击的概念验证实现 一个通用的 TCP 代理实现和审计工具 ，用于执行 协议无关 的 ssl/tls 拦截以及针对 SMTP、POP3、IMAP、FTP、NNTP、XMPP、ACAP 和 IRC 的 STARTTLS 剥离攻击。 Python2! 🏆 战利品 CVE-2016-0772 - python: smtplib CVE-2016-10027 - Smack XMPP 库 //使用本项目发现了漏洞？欢迎与我联系！ 要求： Python = 2.7.9（SSLContext） Python 3 （可选，用于 TLS 拦截）PEM...

xepor

Xepor Xepor pronounced /ˈzɛfə/ , zephyr is a web routing framework for reverse engineers and security researchers. It provides a Flask-like API for hackers to intercept and modify HTTP requests and/or HTTP responses in a human-friendly coding style. This project is meant to be used with mitmproxy...

watermarks-remover

| | | || | | |/ |/| || |/ |/ |/ | |/| | | | | | |/ ||| | | | | | \ | | | | | \ | \ | \ | | | || / | | \ watermarks-remover Habilidad de agente + servicio Python de biblioteca estándar para eliminar marcas de procedencia de IA de múltiples proveedores de texto y archivos — para privacidad e...

KsDumper

🔴 Este repositorio está desactualizado debido a que el controlador Capcom ha sido parcheado 🔴 Gracias a mastercodeon314 ahora hay un puerto que funciona en Windows 11. ¡Disfrútalo! https://github.com/mastercodeon314/KsDumper-11 KsDumper Siempre he tenido interés en la ingeniería inversa. Hace uno...

aegis

Aegis 内核模式进程保护驱动程序，使用 ObRegisterCallbacks 从句柄中剥离内存访问权限。基础实现拦截句柄创建，并从未经授权的访问尝试中移除 PROCESSVMREAD/WRITE/OPERATION。 注意： 如果 GIF 没有动画，请在 Imgur 上直接查看 概述 驱动在高度 321123 注册 OB 回调，拦截 OBOPERATIONHANDLECREATE 和 OBOPERATIONHANDLEDUPLICATE 操作。当进程尝试打开受保护目标的句柄时，我们根据白名单（explorer.exe, csrss.exe, svchost.exe,...

CVE-2019-13498

CVE-2019-13498 漏洞标题：MITM - 缺失HSTS导致凭据窃取和内容篡改 日期：07/10/2019 漏洞作者：Furqan Khan 厂商主页：https://www.oneidentity.com/ 软件链接：https://www.oneidentity.com/products/cloud-access-manager/ 版本：8.1.3 测试环境：Kali Linux , Windows 7 ,Ubantu 16.04 为了进行MITM攻击并窃取用户名、密码和OTP，我们使用了bettercap...

mysslstrip

mysslstrip mysslstrip 是一个基于 Python 的概念验证工具，演示了如何对 MySQL 流量进行中间人攻击并剥离 SSL/TLS，对应 CVE-2015-3152。 用法 mysslstrip.py -h -p LISTENPORT -i LISTENINTERFACE dest 示例输出 root@duo1 python2.7 mysslstrip.py -p 3307 127.0.0.1:3306 2015-04-29 21:33:14+0000 - Log opened. 2015-04-29 21:33:14+0000 - listen:...

inference-gateway-PoC

inference-gateway: aviso de seguridad | ---|--- Investigador| Dostxodjayev Abdullox @squeeze440 Aviso| GHSA-5293-fcm6-fh8v CVE| CVE-2026-87009 CVSS 3.1| 5.4 Medio — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Debilidad| CWE-352, CWE-306, CWE-346 Estado| Corregido en v0.46.0 Resumen :...

FRAGNESIA-Charan-cve-2026-46300

Charantej 架构：加固容器暂存与系统调用遥测实验室 一个企业级、纵深防御的容器隔离与运行时安全遥测框架。从思科首席网络安全架构师的角度设计，Charantej 架构隔离暂存运行时、限制系统调用面，并使用主机级审计工具实现实时内核遥测，以保护现代 Linux 容器部署。 高级设计 HLD Charantej 架构强制实施隔离、最小权限容器和外带监控，以确保安全边界能够抵御主机内核妥协向量。 flowchart TD subgraph HostOS "Host OS Secured Linux Node" subgraph Docker "Docker Container...

redact

redact Strip credential-like content from free-form strings before they reach logs, telemetry, or any third-party surface Part of thephpboyscout Go toolkit — small, framework-free Go modules extracted from go-tool-base. Docs: redact.go.phpboyscout.uk gitlab.com/phpboyscout/go/redact redacts...

refresh

Refresh 此容器模拟了F5路由器中CVE-2022-1388的易受攻击功能，允许远程代码执行（RCE）。 CVE-202201388源于不同认证机制和代理（broxying）之间复杂的关系，该代理剥离了头部信息，导致对webapp中管理员端点的非授权访问。 竞争者必须使用他们的机器人发送一个利用此漏洞的web请求。 构建 docker build -t refresh . 运行 docker run -p 80:80 refresh 利用 python3 exploit.py -u http://localhost -t 参考...

Rocky Linux 9 [CIQ] Security Update: libsoup / libsoup-debuginfo / libsoup-debugsource / libsoup-devel Multiple Vulnerabilities (crlsa-2024_9559)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20249559 advisory. libsoup: infinite loop while reading websocket data CVE-2024-52532 libsoup: HTTP request smuggling via stripping null bytes from the ends of header names...

CentOS Linux 7 [TuxCare] Security Update: ruby / ruby-devel / ruby-doc / ruby-irb / ruby-libs / ruby-tcltk / etc Multiple Vulnerabilities (CENTOS7:CLSA-2024:1727115733)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2024:1727115733 advisory. - In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags...

GHSA-FQ95-V8XC-JM3V Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Affected: github.com/fabiolb/fabio = 1.6.6 through 1.7.1 and master HEAD c75f8a6. Summary The v1.6.6 fix for CVE-2025-48865 sweeps the client Connection header against a hardcoded allowlist protectHeaders proxy/httpheaders.go:28-36 containing only the 7 X-Forwarded family headers. Fabio also...

Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Affected: github.com/fabiolb/fabio = 1.6.6 through 1.7.1 and master HEAD c75f8a6. Summary The v1.6.6 fix for CVE-2025-48865 sweeps the client Connection header against a hardcoded allowlist protectHeaders proxy/httpheaders.go:28-36 containing only the 7 X-Forwarded family headers. Fabio also...

CVE-2026-62987

Fabio (an HTTP/S and TCP router for Consul-managed applications) versions 1.6.6 through 1.7.2 contain an incomplete fix for CVE-2025-48865 . The protectHeaders logic in proxy/http_headers.go covers a hardcoded set of forwarded headers but omits operator-configured ClientIPHeader , TLSHeader , and...

CVE-2026-62987 Fabio - Incomplete fix for CVE-2025-48865: operator-configured trust headers (clientip/tls/requestid) still strippable via the Connection header

Fabio is an HTTPS and TCP router for deploying applications managed by consul. From 1.6.6 until 1.7.2, the CVE-2025-48865 fix in proxy/httpheaders.go uses protectHeaders for a hardcoded set of forwarded headers but omits the operator-configured ClientIPHeader, TLSHeader, and RequestID names. In...

PT-2026-93300

The Formidable Forms WordPress plugin before 6.35 does not restrict who can set the identifier recording which user last edited a form entry, and relies on that identifier when deciding whether to strip HTML from stored entry values, allowing unauthenticated visitors to have markup rendered in th...