token-proxy

llm-token-proxy A transparent PII redaction proxy for LLM API traffic. Sits between your application and the LLM provider, pseudonymizing sensitive data on the way out and restoring it on the way back. Your LLM never sees real names, emails, IPs, or domains — it works entirely with structured...

go-http-proxy-to-socks

GoHPTS - HTTPS and TCP/UDP transparent proxy to SOCKS4/SOCKS5 proxy chain written in Go...

Modlishka

..Modlishka.. Modlishka is an open-source penetration testing tool that acts as a man-in-the-middle proxy. It introduced a new technical approach to handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a sing...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, MacOS or Windows. You have access to a remote network via ssh. You don't necessarily have admin access on th...

sshuttle

sshuttle: حيث يلتقي البروكسي الشفاف مع VPN مع ssh على حد علمي، sshuttle هو البرنامج الوحيد الذي يحل الحالة الشائعة التالية: جهاز العميل الخاص بك أو الموجه هو Linux، FreeBSD، MacOS أو Windows. لديك إمكانية الوصول إلى شبكة بعيدة عبر ssh. ليس بالضرورة أن يكون لديك صلاحيات إدارية على الشبكة البعيدة...

mcpsnoop

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal. The problem The official MCP Inspector connects as its own client, so it never sees what your client Cursor, Claude Code, Codex actually sends your server. An...

tor-router

TOR Router Tor Router allow you to use TOR as a transparent proxy and send all your trafic under TOR INCLUDING DNS REQUESTS , the only that you need is: a system using systemd if you want to use the service and tor. TOR router doesn't touch system files as the rest of tools for routing your taffi...

ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

sslsplit

SSLsplit - اعتراض شفاف لـ SSL/TLS https://www.roe.ch/SSLsplit نظرة عامة SSLsplit هي أداة لهجمات الرجل في الوسط ضد اتصالات الشبكة المشفرة بـ SSL/TLS. تهدف إلى أن تكون مفيدة في تحليل الطب الشرعي للشبكة، وتحليل أمان التطبيقات، واختبار الاختراق. تم تصميم SSLsplit لإنهاء الاتصالات التي يتم إعادة توجيه...

anonym8

root@kitploit: EN @HiroshimanRise anonym8 Privacy Friend Transparent Proxy through TOR, I2P, Privoxy, Polipo and modify DNS, for a simple and better privacy and security; Include Anonymizing Relay Monitor arm, macchanger, hostname and wipe Cleans ram/cache & swap-space features. Tested on Debian...

kalitorify

وكيل شفاف عبر تور لتوزيعة Kali Linux حول kalitorify kalitorify هو سكريبت شل لتوزيعة Kali Linux يستخدم إعدادات iptables لإنشاء وكيل شفاف عبر شبكة Tor ، كما يتيح البرنامج إجراء فحوصات متنوعة مثل التحقق من عقدة الخروج لتور أي عنوان IP العام الخاص بك عندما تكون تحت وكيل تور، أو التحقق مما إذا تم تكوي...

kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, or MacOS. You have access to a remote network via ssh. You don't necessarily have admin access on the remote...

pentestproxy

PentestProxy Scripts for building a Covert Pentesting Infrastructure using RedSocks and DNScrypt. Overview This repository contains a set of Bash scripts to assist in setting up a transparent proxy infrastructure. It routes traffic through a SOCKS5 proxy via RedSocks and encrypts DNS queries via...

EUVD-2026-37786

Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the stats page by injecting a matching Host header or bypass detection via port manipulation. Remote attackers can trigger...

CVE-2026-55202 Tinyproxy - Stathost Detection Bypass via Host Header Manipulation

Tinyproxy through 1.11.3, fixed in commit 09312a1, fails to properly validate the Host header during stathost detection, allowing unauthenticated attackers to access the stats page by injecting a matching Host header or bypass detection via port manipulation. Remote attackers can trigger...

EUVD-2020-7909

Malware in sbrugna...

Matrix Media Repo (MMR) allows Server-Side Request Forgery (SSRF) on redirects and federation

Impact Matrix Media Repo MMR is vulnerable to server-side request forgery, serving content from a private network it can access, under certain conditions. Patches This is fixed in MMR v1.3.8. Workarounds Restricting which hosts MMR is allowed to contact via local firewall rules or a transparent...

CVE-2024-52602

CVE-2024-52602 affects Matrix Media Repo (MMR), a multi-homeserver media repository for Matrix. An SSRF (server-side request forgery) vulnerability could cause MMR to fetch and serve content from a private network accessible to the server under certain conditions. The issue is mitigated by upgrad...

Fortinet Fortigate fails to block malformed HTTP/S traffic when transparent proxy is enabled (FG-IR-20-172)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-20-172 advisory. - When traffic other than HTTP/S eg: SSH traffic, etc... traverses the FortiGate in version below 6.2.5 and below 6.4.2 on po...