chisel

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

shootback

shootback shootback 是一个反向 TCP 隧道，让你可以访问 NAT 或防火墙后面的目标 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. 在 800 并发下消耗不到 1% 的 CPU 和 8MB 内存. slaver 是 单文件 ，且仅依赖 python2.7/3.4+ 标准库. 工作原理 典型场景 1. 从家里访问公司/学校的电脑（没有外网IP） 从家里连接公司或学校里没有独立外网IP的电脑 2. 使私有网络/站点公开。 使内网或内网站点能从公网访问 3. 辅助内网渗透。 辅助内网渗透 4. 辅助CTF线下赛。 辅助CTF线下赛,...

shootback

shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall 反向TCP隧道, 使得NAT或防火墙后的内网机器可以被外网访问. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...

bore

bore 一个用 Rust 编写的现代、简单的 TCP 隧道，可将本地端口暴露给远程服务器，绕过标准的 NAT 连接防火墙。它只做一件事：不多也不少。 root@kitploit: 安装（需要 Rust，见下方其他方式） cargo install bore-cli 在本地机器上 bore local 8000 --to bore.pub 这将把你的本地端口 localhost:8000 暴露给公共互联网上的 bore.pub:，端口号是随机分配的。 类似于 localtunnel 和 ngrok，但 bore 旨在成为一个高效、无偏见的 TCP...

bore

bore A modern, simple TCP tunnel in Rust that exposes local ports to a remote server, bypassing standard NAT connection firewalls. That's all it does: no more, and no less. root@kitploit: Installation requires Rust, see alternatives below cargo install bore-cli On your local machine bore local 80...

wa-tunnel

wa-tunnel - 通过 WhatsApp 实现 TCP 隧道 这是一个基于 Baileys 的代码片段，允许您通过两个 WhatsApp 账号来传输 TCP 数据。 这在不同的场景下都能派上用场，例如，网络运营商提供无限 WhatsApp 数据流量的情况，或者在飞机上也能获得无限社交网络数据流量的情况。 它使用 Baileys，因为这是一个基于 WebSocket 的多设备 WhatsApp 库，因此将来可以在 Android 上使用（例如通过 Termux）。 其思路是，在服务器端设置一个代理，结构如下：客户端（受限访问）- WhatsApp - 服务器 - 代理 - 互联网...

firecat

firecat 更多信息，请参阅： http://www.bishopfox.com/resources/tools/other-free-tools/firecat/ Firecat 是一款渗透测试工具，允许您从被入侵网络中打通反向 TCP 隧道。隧道建立后，您可以从外部主机连接到被入侵网络内任何系统上的任何端口，即使该网络位于 NAT 网关和/或严格防火墙之后。该工具可用于多种目的，包括获取对被入侵 Web 服务器经 NAT 映射后的内部网络 IP 地址（例如 192.168.1.10）的远程桌面访问权限。 安装 Firecat 使用 C 语言编写，并已在...

AZL-91457 CVE-2026-13318 affecting package kubevirt 1.8.4-1

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

CVE-2026-13318

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

[SECURITY] Fedora 40 Update: chisel-1.10.0-1.fc40

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 39 Update: chisel-1.10.0-1.fc39

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 41 Update: chisel-1.10.0-1.fc41

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 36 Update: chisel-1.7.7-4.fc36

A fast TCP tunnel over HTTP...

[SECURITY] Fedora 35 Update: chisel-1.7.7-3.fc35

A fast TCP tunnel over HTTP...

Fedora: Security Advisory for chisel (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for chisel (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for chisel (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: chisel-1.7.7-2.fc35

A fast TCP tunnel over HTTP...

Exposure of Sensitive Information to an Unauthorized Actor in fgribreau/node-request-retry

Exposure of Sensitive Information to an Unauthorized Actor in FGRibreau/node-request-retry Reported on Feb 10 2022 | Timothee Desurmont Vulnerability type: CWE-200 Bug Cookies are leaked to external sites. Description js request$mysite/redirect.php?url=$attacker/, options When fetching a Redirect...

Invoke-SocksProxy - Socks Proxy, And Reverse Socks Server Using Powershell

Creates a local or "reverse" Socks proxy using powershell. The local proxy is a simple Socks 4/5 proxy. The reverse proxy creates a tcp tunnel by initiating outbond SSL connections that can go through the system's proxy. The tunnel can then be used as a socks proxy on the remote host to pivot int...