Commit Graph

527 Commits

Author SHA1 Message Date
Domingo Dirutigliano
f3ce593af5
Update copyright year and remove star history
Updated copyright year from 2025 to 2026 and removed star history section.
2026-08-24 16:48:27 +02:00
Domingo Dirutigliano
60ca9c049d
Merge pull request #39 from Pwnzer0tt1/dev
integrated more tooltips
2026-07-24 13:47:58 +02:00
Domingo Dirutigliano
0dd538621d
integrated more tooltips 2026-07-24 13:47:31 +02:00
Domingo Dirutigliano
8a2212a898
Merge pull request #38 from Pwnzer0tt1/dev
Improve README documentation
2026-07-24 11:06:17 +02:00
Domingo Dirutigliano
728fcbdf2f
improved readme 2026-07-24 11:05:38 +02:00
Domingo Dirutigliano
6cc2b7d6bc
Merge pull request #37 from Pwnzer0tt1/dev
enforced security over import backup, minor changes
2026-07-23 18:45:26 +02:00
Domingo Dirutigliano
0943aeaa01
enforced security over import backup, minor changes 2026-07-23 18:38:22 +02:00
Domingo Dirutigliano
cc81d02d90
Merge pull request #36 from Pwnzer0tt1/dev
Dev
2026-07-23 16:53:32 +02:00
Domingo Dirutigliano
bd55a7bc9c
integrated and refactore docs + minor changes 2026-07-23 16:53:09 +02:00
Domingo Dirutigliano
f06c389161
Merge pull request #35 from Pwnzer0tt1/dev-tmp
Integrating edits on main to dev branch
2026-07-23 13:45:33 +02:00
Domingo Dirutigliano
d27831c9ec
Merge branch 'dev' into dev-tmp 2026-07-23 13:45:25 +02:00
Domingo Dirutigliano
7881da7128
Merge pull request #33 from Sogoss/feat/tls-support
Add transparent TLS proxying and certificate management for NFProxy and NFRegex
2026-07-23 13:43:16 +02:00
Domingo Dirutigliano
be7f46424a
Merge branch 'main' into feat/tls-support 2026-07-23 13:40:19 +02:00
Domingo Dirutigliano
c37d2b31e8
graphics and TLS feature total refactoring 2026-07-23 13:39:01 +02:00
Domingo Dirutigliano
1a1135ab6a
Merge pull request #34 from Sogoss/feat/http-history
Add HttpHistory support for pyfilters in HTTP requests
2026-07-22 15:11:37 +02:00
Domingo Dirutigliano
53656d531c
minor fixes and integrated test 2026-07-22 15:10:31 +02:00
Domingo Dirutigliano
4125eff93f
minor adjustments + network address based access control 2026-07-22 07:54:38 +02:00
Sogoss
9e4f93455b fix(nfproxy): prevent O(N²) memory growth from nested history snapshots
Objects archived in the history deques no longer carry their own
_history snapshot, breaking the recursive chain where each historical
entry held copies of all prior entries. The .history property on
archived objects now returns an empty HttpHistory([], []) instead.
2026-07-21 15:19:30 +02:00
Sogoss
c71ad7c199 fix(nfproxy): export HttpHistory in nfproxy and ensure list immutability in getters 2026-07-20 16:14:07 +02:00
Sogoss
dbc8b176b1 fix(nfproxy): fix HttpHistory parameter ordering and state immutability
- Fix parameter order sensitivity in HttpHistory._fetch_packet when history is first argument

- Delegate total_size and should_upgrade to _message instead of live _parser

- Sanitize FGEX_MAX_HISTORY_SIZE with max(0, int(val)) and dynamically sync deque maxlen
2026-07-20 16:03:43 +02:00
Sogoss
a94854d00e feat(nfproxy): add HttpHistory support for pyfilters in HTTP requests 2026-07-20 15:31:56 +02:00
Sogoss
75c54f0155 Add transparent TLS proxying and certificate management for NFProxy and NFRegex
- Add Nginx stream proxy module for transparent TLS termination in NFProxy and NFRegex
- Add backend routes and SQLite schema for certificate management (upload, view, delete)
- Implement DNAT nftables redirection rules for deterministic TLS ports
- Add frontend React components (TLSConfigModal, TLSServiceFields) for certificate configuration
- Update Dockerfile and docker-entrypoint.sh to support Nginx stream module and sysctl forwarding
2026-07-20 12:25:30 +02:00
Domingo Dirutigliano
bd10f9e8b8
Merge pull request #32 from Pwnzer0tt1/dev
auto-recognize version when using cloned firegex
2026-07-12 19:02:41 +02:00
Domingo Dirutigliano
4f62a7c7c9
Merge branch 'dev' of github.com:Pwnzer0tt1/firegex into dev 2026-07-12 18:59:06 +02:00
Domingo Dirutigliano
935a6a1574
auto-recognize version when using cloned firegex 2026-07-12 18:58:57 +02:00
Domingo Dirutigliano
cf2cbfea80
auto-recognize version when using cloned firegex 2026-07-12 18:46:35 +02:00
Domingo Dirutigliano
729139852b
Update standalone mode description in README
Clarify the conditions for running Firegex in standalone mode.
2026-07-08 16:34:51 +02:00
Domingo Dirutigliano
24634ec60b
mantine update 2026-06-21 11:49:53 +02:00
Domingo Dirutigliano
721f94c52b
Merge branch 'main' of github.com:Pwnzer0tt1/firegex 2026-06-18 21:00:41 +02:00
Domingo Dirutigliano
5bf000fdce
invalid request check on nfqueue updated 2026-06-18 21:00:30 +02:00
Domingo Dirutigliano
8df9fbf359
Update Netfilter Proxy description in README
Removed 'EXPERIMENTAL' label from Netfilter Proxy description in README.
2026-06-07 15:49:57 +02:00
Domingo Dirutigliano
16d0bfd169
CRITICAL: fix possible path traversal 2026-04-10 14:52:22 +02:00
Domingo Dirutigliano
16f96aa6f6
using brotli 1.2 from pypi, fixed tests to py 3.14, removed from experimental pyproxy 2025-11-11 23:30:48 +01:00
Domingo Dirutigliano
49c6c14fe5
upgrade to py3.14 and fedora 43 2025-10-13 15:38:38 +02:00
Domingo Dirutigliano
b352790f64
Merge pull request #31 from Minei3oat/restart-fixes
Fix caching problems on fresh restart
2025-10-03 08:17:48 +02:00
Minei3oat
f3024cc9a8 Invalidate cache on login 2025-10-03 00:58:55 +02:00
Minei3oat
753ed241b6 Clear password fields after submit 2025-10-03 00:58:34 +02:00
Domingo Dirutigliano
676e1dcb77
Merge pull request #30 from Minei3oat/socketio
Reconnect to websocket on access_token change
2025-10-02 23:13:24 +02:00
Minei3oat
0c5a681f5b Reconnect to websocket on access_token change 2025-10-02 23:10:26 +02:00
Domingo Dirutigliano
c726855b1c
Merge pull request #29 from Pwnzer0tt1/unix_sock_bind
additional fixes to socket binding
2025-10-01 15:40:02 +02:00
Domingo Dirutigliano
bb4addf590
Merge pull request #28 from Minei3oat/socket
Allow binding to UNIX domain sockets
2025-10-01 15:39:40 +02:00
Domingo Dirutigliano
f554ac558a
additional fixes to socket binding 2025-10-01 15:37:20 +02:00
Minei3oat
88f4f54b55 Allow binding to UNIX domain socket
UNIX domain sockets are the recommended configuration for proxying with Nginx:
https://uvicorn.dev/deployment/#running-behind-nginx
2025-10-01 01:49:28 +02:00
Domingo Dirutigliano
0492f16cea
using empty string instead of None to bind dualstack server 2025-09-29 16:39:27 +02:00
Domingo Dirutigliano
2362eb8045
password hashing customized and also set already hashed by run.py 2025-09-29 14:33:12 +02:00
Domingo Dirutigliano
aeb97062e2
bind firegex also on ipv6 by default 2025-09-29 13:15:09 +02:00
Domingo Dirutigliano
402be8c021
new crypto system for passwords, removed bcrypt 2025-09-29 12:53:05 +02:00
Domingo Dirutigliano
2798cd4f2a
Merge pull request #25 from Minei3oat/bcrypt
Restrict bcrypt version to <5
2025-09-29 00:03:27 +02:00
Domingo Dirutigliano
5343735129
Merge pull request #27 from Minei3oat/image-size
Reduce docker image size by 35%
2025-09-28 23:48:57 +02:00
Minei3oat
2f96739908 Use COPY instead of ADD
> Use ADD only when you need the additional capabilities it offers, but be mindful of potential security implications.
https://www.docker.com/blog/docker-best-practices-understanding-the-differences-between-add-and-copy-instructions-in-dockerfiles/
2025-09-28 22:28:46 +02:00