8000 Commits · aqua/nothingofvalue · GitHub

More Web Proxy on the site http://driver.im/

Commits

Commits on May 23, 2025

a CMSish thing that uses node-ish .env files
Devin Carraway
committed
more ways to YAML, Jira pom.properties XML
Devin Carraway
committed

Commits on Apr 27, 2025

.npmrc can have multiple forms
Devin Carraway
committed
fake .npmrc
Devin Carraway
committed
Generate wordpress configs
Devin Carraway
committed

Commits on Apr 4, 2025

couchdb and ms exchange probers
Devin Carraway
committed
CouchDB prober
Devin Carraway
committed
Bring wordpress out to its own handler
Devin Carraway
committed
yet another wordpress request smuggling pattern
Devin Carraway
committed

Commits on Mar 29, 2025

Report overt WP/PHP HEAD probes as abusive
Devin Carraway
committed

Commits on Mar 27, 2025

more examples
Devin Carraway
committed

Commits on Mar 26, 2025

README was citing demo URLs that could get reported, so allow
Devin Carraway
committed

Commits on Mar 25, 2025

revert frequency-table iteration approach
Devin Carraway
committed
Frequency table version of english-ish text generation
Devin Carraway
committed

Commits on Mar 24, 2025

When simulating text, use English letter frequency
Devin Carraway
committed

Commits on Mar 23, 2025

/llms.txt generator
Devin Carraway
committed
remove another debug msg
Devin Carraway
committed
remove a debug message
Devin Carraway
committed
escaped checkin
Devin Carraway
committed
Escalating responses to XML-RPC abuse bots
Devin Carraway
committed

Commits on Mar 21, 2025

One more phpinfo() smuggling approach
Devin Carraway
committed

Commits on Mar 19, 2025

More WP abuse paths
Devin Carraway
committed

Commits on Mar 17, 2025

CVE-2024-20767 being used to steal credentials
Devin Carraway
committed
allow a magic token in the ?query part of the URL to suppress reporting
Devin Carraway
committed
hansunCMS upload vulnerability prober, a new phpinfo() prober
Devin Carraway
committed

Commits on Mar 15, 2025

WP json attacks sometimes poke the /wp-json directory alone
Devin Carraway
committed
Turns out abusebots sometimes look for git logs, give them some
Devin Carraway
committed
log the address after consulting Forwarded headers
Devin Carraway
committed
big escaped checkin. Also add cache to limit re-reporting.
Devin Carraway
committed

Commits on Mar 14, 2025

Only use Forwarded: if --trust-forwarded-headers is given
Devin Carraway
committed
don't log the headers anymore
Devin Carraway
committed
Use the Forwarded header, if present, to determine the remote host
Devin Carraway
committed

Commits on Mar 13, 2025

Flesh out AbuseIPDB reporting
Devin Carraway
committed

Commits on Mar 12, 2025

Roughed out the skeleton of a honeypot reporting feature
Devin Carraway
committed

Commits on Mar 10, 2025

node default renaming knows no bounds
Devin Carraway
committed

0