
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
com.github.puhaiyang:easy-http-proxy
Advanced tools
support http/https proxy.类似于fiddler,由java编写,代码简单便于理解。支持http/https代理!
support http/https proxy.类似于fiddler,由java编写,代码简单便于理解。支持http/https代理!
添加依赖
<dependency>
<groupId>com.github.puhaiyang</groupId>
<artifactId>easy-http-proxy</artifactId>
<version>0.0.1</version>
</dependency>
启动代理服务器:
EasyHttpProxyServer.getInstace().start(6667);
https://slproweb.com/products/Win32OpenSSL.html,在windows下默认会在C:\Program Files\Open SSL Win64目录下,需要将其配到path
说明
openssl genrsa
功能:
用于生成RSA私钥,不会生成公钥,因为公钥提取自私钥
使用参数:
openssl genrsa [-out filename] [-passout arg] [-des] [-des3] [-idea] [numbits]
选项说明:
-out filename :将生成的私钥保存至filename文件,若未指定输出文件,则为标准输出。
-numbits :指定要生成的私钥的长度,默认为1024。该项必须为命令行的最后一项参数。
-des|-des3|-idea:指定加密私钥文件用的算法,这样每次使用私钥文件都将输入密码,太麻烦所以很少使用。
-passout args :加密私钥文件时,传递密码的格式,如果要加密私钥文件时单未指定该项,则提示输入密码。传递密码的args的格式见一下格式。
a.pass:password :password表示传递的明文密码
b.env:var :从环境变量var获取密码值
c.file:filename :filename文件中的第一行为要传递的密码。若filename同时传递给"-
passin"和"-passout"选项,则filename的第一行为"-passin"的值,第
二行为"-passout"的值
d.stdin :从标准输入中获取要传递的密码
openssl genrsa -des3 -out ca.key 2048
openssl req -sha256 -new -x509 -days 36500 -key ca.key -out ca.crt -subj "/C=CN/ST=GD/L=SZ/O=haiyang/OU=study/CN=HaiyangProxy"
openssl pkcs8 -topk8 -nocrypt -inform PEM -outform DER -in ca.key -out ca_private.der
FAQs
support http/https proxy.类似于fiddler,由java编写,代码简单便于理解。支持http/https代理!
We found that com.github.puhaiyang:easy-http-proxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.