Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Scrapes the web for reliable http/https proxies and tests them for speed and reliability. Can be used as both a python module and a command line utility. When run as a command line utility, proxies are sent to stdout. When run as a module, it returns a generator.
Check out the project on PyPi at https://pypi.python.org/pypi/grey_harvest/0.1.3.5
First, install the following dependencies::
# On Centos/RHEL/Fedora:
sudo yum install python-devel libxlt-devel libxml-devel
# On Debian/Ubuntu:
sudo apt-get install python-dev libxml2-dev libxslt1-dev
Then install grey_harvest using pip as follows::
pip install grey_harvest
We can generate a list of 10 viable proxies with the following command::
# use the -n flag to specify number of proxies to generate
grey_harvest -n 10
To select only proxies with SSL enabled, we do this::
# use the -H flag to select only https proxies
grey_harvest -n 10 -H
We can use the -a flag to filter for proxies located within a list of specific countries. For example, to choose proxies located within Ukraine, Hong Kong, and the United States, we'd use this::
# use the -a flag to filter by country
grey_harvest -a "United States" "Hong Kong" Ukraine -n 10
We can use the -p flag to filter for ports running on specific ports::
# the -p flag to only use proxies that run on port 80
grey_harvest -p 80 -n 10
We can deny proxies located within specific countries by using the -d flag. Proxies located within China are blocked by default as they are often located behind the Great Firewall, and as such tend to be unreliable. This can be changed within grey_harvest.py's internal configs.::
# use the -d flag to deny proxies located within France and
# Germany
grey_harvest -d France Germany -n 10 -H
Before diving into the documentation for the grey_harvest library, check out how easily we can generate a list of 20 proxies::
import gray_harvest
''' spawn a harvester '''
harvester = grey_harvest.GreyHarvester()
''' harvest some proxies from teh interwebz '''
count = 0
for proxy in harvester.run():
print proxy
count += 1
if count >= 20:
break
That's it. We now have 20 http/https proxies ready to go.
.. :changelog:
"grey_harvest" is written and maintained by Gabriel 's0lst1c3' Ryan.
Please add yourself here alphabetically when you submit your first pull request.
FAQs
Generate lists of free, reliable http(s) proxies.
We found that grey_harvest demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.