PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Orbien: lightweight high-performance intranet tunneling in Rust

github.com | tool | #pentesting | #open-source | #rust | #network-security | #network-tunneling | #nat-traversal | #proxy | #networking | #tunneling | #orbien
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Orbien is a lightweight Rust intranet tunneling tool supporting TCP, UDP and HTTP(S) proxies over TCP, QUIC, KCP and WebSocket, with CLI and desktop clients, a web UI, token auth and TLS/mTLS.

Why it matters

It is useful for authorized remote access, exposing lab services, and building penetration-testing tunnels, while covering multiple proxy and transport protocols in one tool. Internet-facing servers should use strong tokens and preferably TLS or mTLS to reduce unauthorized-access risk.
Published
Collected

Related coverage

blog · aikido.dev
Aikido launches external network pentesting
TL;DR: Aikido now pentests your external network. Attackers already test your perimeter every day, and with AI agents doing the grunt work, they're faster than ever. Now you can run the same test first. Give our agents one domain and they'll map the internet-facing systems you run and attack them from the outside, exactly like a malicious actor would.
blog · netspi.com
Important Trends Among Masked Identities
IPinfo research on masked IP trends: VPN, proxy and Tor usage across IPv4 and IPv6, with takeaways for allowlisting, denylisting and shrinking cloud attack surface against hidden malicious actors.
blog · netspi.com
The value of multi-layer / comprehensive pen testing
A NetSPI consultant argues application security focus has overshadowed broader risks: in 90-95% of their pen tests, weak network and system configurations still enable full environment compromise.
blog · netspi.com
IP Traceback: Has Its Time Arrived?
In simple terms, IP traceback allows for the reliable identification of the source of IP traffic, despite techniques such as IP spoofing.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
tool · github.com
Droid ASC: High-Performance On-Demand Android Decompiler Front-End for Mobile Security & AI Agents
Radically reduces Android reverse-engineering overhead from tens of minutes and gigabytes of memory to milliseconds and megabytes, providing an ideal, stateless code analysis primitive for autonomous security agents and vulnerability researchers.
Back