Shellshock

Shellshock 漏洞利用 CVE-2014-6271 漏洞利用 描述 该仓库包含针对影响 Unix 系统的漏洞的利用代码。请注意，这仅是一个用于教育目的的概念验证脚本，应负责任地使用。 此利用代码旨在演示 Shellshock 攻击的工作原理，以及如何通过恶意构造的请求头获取系统 shell 访问权限。 免责声明 此仓库仅用于教育目的。请勿将此代码或其中包含的任何信息用于恶意目的。始终遵守道德准则并尊重法律。 使用方法： python3 shellshock.py 目标 URL 本机 IP 本机端口 示例： python3 shellshock.py...

hget

hget This project is my personal project to learn golang to build something useful. Build Status : Install $ go get -d github.com/huydx/hget $ cd $GOPATH/src/github.com/huydx/hget $ make clean install Binary file will be built at ./bin/hget, you can copy to /usr/bin or /usr/local/bin and even ali...

btlejack

BtleJack: a new Bluetooth Low Energy swiss-army knife Btlejack provides everything you need to sniff, jam and hijack Bluetooth Low Energy devices. It relies on one or more BBC Micro:Bit . devices running a dedicated firmware. You may also want to use anAdafruit's Bluefruit LE sniffer or a nRF5182...

punk.py

punk.py Unix SSH 后渗透 1337 工具 工作原理 punk.py 是一款后渗透工具，旨在帮助从被入侵的 Unix 系统进行网络跳板。 它收集 Unix 系统中的用户名、SSH 密钥和已知主机，然后尝试使用所有找到的组合通过 SSH 进行连接。 punk.py 的编写方式使其可在标准的 Python2 和 Python3 解释器上运行。 截图 示例 标准执行： $ ./punk.py 跳过密码检查并使用自定义家目录路径： $ ./punk.py --no-passwd --home /home/ldapusers/ 使用 sudo 执行命令： $ ./punk.py...

punk.py

punk.py unix SSH post-exploitation 1337 tool how it works punk.py is a post-exploitation tool meant to help network pivoting from a compromised unix box. It collect usernames, ssh keys and known hosts from a unix system, then it tries to connect via ssh to all the combinations found. punk.py is...

GHSA-P58F-9548-MPM2 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-102925 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-X78J-V8H9-3J2Q vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-102937 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-C475-QRG2-PJ4R vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, code-server...

CVE-2026-102990 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, code-server...

CVE-2026-102925 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-P58F-9548-MPM2 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-X78J-V8H9-3J2Q vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-102937 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2026-102990 vulnerabilities

Vulnerabilities for packages: code-server...

GHSA-C475-QRG2-PJ4R vulnerabilities

Vulnerabilities for packages: code-server...

[SECURITY] Fedora 43 Update: erlang-26.2.5.21-8.fc43

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

[SECURITY] Fedora 43 Update: cockpit-machines-357-1.fc43

Cockpit component for managing libvirt virtual machines...

[SECURITY] Fedora 44 Update: erlang-26.2.5.21-8.fc44

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...