fisy-fuzz

FIle SYstem - FUZZer 这是我在2020年4月Hack in the Box 2020 Lockdown Edition大会上展示的完整文件系统模糊测试框架。 大会演讲 大会演讲单视频 大会资料 目标 该框架的目标是发现UNIX系统（重点关注BSD系统）上的内核安全漏洞。 它是在针对FreeBSD、OpenBSD和NetBSD进行开发和重度测试的，同时也已初步支持基于Linux的主机。 我们成功发现了超过100个针对UFS和EXT文件系统的独特内核漏洞，同时也在ZFS（最近添加的支持）上获得了大量洞见。 测试用例生成器 makeFS2.py...

tcpdump

TCPDUMP 4.x.y 由 The Tcpdump Group 提供 若要报告安全问题，请发送电子邮件至 [email protected]。 要报告错误和其他问题、贡献补丁、请求功能、提供一般反馈等，请参阅 tcpdump 源代码根目录中的贡献指南。 匿名 Git 可通过以下方式获取 root@kitploit: https://github.com/the-tcpdump-group/tcpdump.git 此目录包含 tcpdump 的源代码，tcpdump 是一款用于网络监控和数据采集的工具。 在过去的几年中，tcpdump...

Auto-Root-Exploit

Auto-Root-Exploit 自动根权限利用工具 作者：Nilotpal Biswas Facebook：https://www.facebook.com/nilotpal.biswas.73 Twitter：https://twitter.com/nilotpalhacker 使用方法： root@kitploit: 对于内核版本 2.6 全部 bash autoroot.sh 2 对于内核版本 3 全部 bash autoroot.sh 3 对于内核版本 4 全部 bash autoroot.sh 4 对于 FreeBSD 和 OpenBSD 全部 bash autoroot....

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

zmap

ZMap: The Internet Scanner ZMap is a fast stateless single packet network scanner designed for Internet-wide network surveys. On a typical desktop computer with a gigabit Ethernet connection, ZMap is capable of scanning the entire public IPv4 address space on a single port in under 45 minutes. Fo...

wpa_supplicant_8_CVE-2021-0326.

wpasupplicant y hostapd Copyright c 2002-2019, Jouni Malinen [email protected] y colaboradores Todos los derechos reservados. Estos programas están licenciados bajo la licencia BSD la que tiene la cláusula de publicidad eliminada. Si va a enviar cambios al proyecto, consulte el archivo...

Packages_wpa_supplicant8_CVE-2021-0326

wpasupplicant 和 hostapd 版权所有 c 2002-2019, Jouni Malinen [email protected] 及贡献者 保留所有权利。 这些程序根据 BSD 许可证（删除了广告条款的版本）授权。 如果您要向该项目提交更改，请参阅 CONTRIBUTIONS 文件以获取更多说明。 此软件包可能包含 wpasupplicant、hostapd 或两者。有关更多详细信息，请参阅相应子目录（wpasupplicant/README 或 hostapd/README）中的 README 文件。 源代码文件在 v0.6.x...

freebsd_kernel_hacking

FreeBSD 内核黑客技术 来自 Joseph Kong 的 《设计 BSD Rootkits》 的练习，已更新至 FreeBSD 11/12。 尽管这本书已出版超过10年，但强烈推荐，因为将书中提供的源代码更新至现代发行版是一个相当大的挑战。 更多资源：learning-kernelhacking。...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction...

duf

duf Disk Usage/Free Utility Linux, BSD, macOS & Windows Features User-friendly, colorful output Adjusts to your terminal's theme & width Sort the results according to your needs Groups & filters devices...

uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

xmap

XMap: The Internet Scanner XMap is a fast network scanner designed for performing Internet-wide IPv6 & IPv4 network research scanning. XMap is reimplemented and improved thoroughly from ZMap and is fully compatible with ZMap, armed with the "5 minutes" probing speed and novel scanning techniques...

[SECURITY] Fedora 43 Update: tmux-3.7-3.fc43

tmux is a "terminal multiplexer." It enables a number of terminals or windows to be accessed and controlled from a single terminal. tmux is intended to be a simple, modern, BSD-licensed alternative to programs such as GNU Screen...

SUSE CVE-2026-39883

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.15.0 to 1.42.0, the fix for CVE-2026-24051 changed the Darwin ioreg command to use an absolute path but left the BSD kenv command using a bare name, allowing the same PATH hijacking attack on BSD and Solaris platforms. This...

[SECURITY] Fedora 43 Update: python-django-haystack-3.4.0-1.fc43

Haystack provides modular search for Django. It features a unified, familiar API that allows you to plug in different search backends such as Solr, Elasticsearch, Whoosh, Xapian, etc. without having to modify your code. Haystack is BSD licensed, plays nicely with third-party app without needing t...

SUSE-SU-2026:2696-1 Security update for 7zip

This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure bsc1267858. - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation bsc1267421. - CVE-2026-48101: Information...

CVE-2026-57964

A flaw was found in spice-vdagent. On macOS and BSD platforms, an unprivileged local user can bypass authentication by connecting to the Unix Domain Socket Client/Server UDSCS socket. This allows the unauthorized user to receive host-to-guest messages, including clipboard data and file transfers,...

OPENSUSE-SU-2026:21038-1 Security update for 7zip

This update for 7zip fixes the following issues Update to 26.01: - CVE-2026-48092: Information disclosure in 32-bit builds due to heap memory disclosure bsc1267858. - CVE-2026-48095: Heap buffer overflow via NTFS compressed stream buffer under-allocation bsc1267421. - CVE-2026-48101: Information...

SUSE CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...

CVE-2026-48112

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style .SYMDEF symbol table, the...