
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
http-proxy-to-socks
Advanced tools
hpts(http-proxy-to-socks) is a nodejs client to convert socks proxy into http proxy
hpts(http-proxy-to-socks) is a nodejs tool to convert SOCKS proxy into http proxy.
Many clients support setting up http proxy to speed up network requests and for sometimes only SOCKS proxy is available to you. SOCKS proxy supports TCP so that it's possible to convert those requests from http proxy into SOCKS protocol. In this way, you can still keep the goodness provided by your SOCKS proxy(e.g. encryption).
npm install -g http-proxy-to-socks
Make sure your nodejs version is greater than 4
.
hpts -s 127.0.0.1:1080 -p 8080
This will start a process listening on 8080
as a http proxy. It will convert http requests into socks requests and send them to port 1080
. Please make sure your socks service is available at the corresponding port.
Other options:
Options:
-V, --version output the version number
-s, --socks [socks] specify your socks proxy host, default: 127.0.0.1:1080
-p, --port [port] specify the listening port of http proxy server, default: 8080
-l, --host [host] specify the listening host of http proxy server, default: 127.0.0.1
-c, --config [config] read configs from file in json format
--level [level] log level, vals: info, error
-h, --help output usage information
You can specify a json
config file with -c
:
{
"socks": "127.0.0.1:1080",
"port": 8080
}
Please add more tests for corresponding features when you send a PR:
npm run test
MIT
1.1.3, 1.1.4
FAQs
hpts(http-proxy-to-socks) is a nodejs client to convert socks proxy into http proxy
The npm package http-proxy-to-socks receives a total of 434 weekly downloads. As such, http-proxy-to-socks popularity was classified as not popular.
We found that http-proxy-to-socks demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.