Skip to content

Security: karimfayadd/4100

Security

SECURITY.md

Security

4100 is a local proxy rotator for authorized assessments. Unauthorized use against systems you do not own or lack written permission to test is illegal.

Report a vulnerability in 4100

If you find a security issue in this repository or the official exe, do not open a public issue with exploit details.

  1. Open github.com/karimfayadd
  2. Contact Karim Fayad through GitHub
  3. Include the version and steps to reproduce

Please give reasonable time before any public disclosure.

Out of scope

  • Using 4100 against a third-party target (that belongs to the program you are testing)
  • Requests to add exploit kits, credential dumpers, or open-relay mode — 4100 will not ship those
  • Binding the listener to the LAN without local auth is a user choice, not a product vulnerability

There aren't any published security advisories