sudo-exploit

使用方法 注: エクスプロイト実行中は、libnssX ディレクトリが現在の作業ディレクトリに存在している必要があります ubuntu 18.04 ubuntu 20.04...

Make-and-Break

メイク・アンド・ブレイク 脆弱な仮想マシンを作成して悪用する 説明: Ubuntu 18.04.1 と Webmin 1.810 を実行するカスタム仮想マシンを構築しました。CVE-2019-15107 を使用して Linux システム管理インターフェースのバックドアを悪用します。 概念実証 --- Linux OS Ubuntu 18.04.1 がセキュリティ上の欠陥を含んでデプロイされ、攻撃者がシステムをルートレベルまで侵害できるようになります。 SSHサーバーのインストール Webmin 1.890 のインストール デフォルトでポート10000で動作するユーザー名 deathsta...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...

attifyos

AttifyOS v3.0 AttifyOS는 사물인터넷IoT 기기의 보안 평가 및 침투 테스트를 수행하는 데 도움을 주기 위해 설계된 배포판입니다. 필요한 모든 도구가 로드된 사전 구성된 환경을 제공하여 많은 시간을 절약해 줍니다. 새 버전은 Ubuntu 18.04 64비트를 기반으로 하며, 즉 2023년 4월까지 이 버전에 대한 업데이트를 받을 수 있습니다. 면책 조항 - 적절한 승인을 받은 대상만 테스트하시기 바랍니다. 귀하는 이 도구로 수행하는 모든 행동에 대한 책임을 집니다. 다운로드 링크 Google Drive -...

EmbedOS

EmbedOS EmbedOS - Ubuntu 18.04 기반의 임베디드 보안 테스트 운영체제로, 펌웨어 보안 테스트 도구가 사전 탑재되어 있습니다. 이 가상 머신은 OVF 파일로 다운로드하여 VirtualBox나 VMWare에 가져올 수 있습니다. 다운로드 링크 최신 버전은 2020년 10월의 2020.2이며, 다음 링크를 통해 다운로드할 수 있습니다: Google Drive 직접 root@kitploit: shasum -a 256 EmbedOS2020.2-disk1.vmdk...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

BugBuntu

BugBuntu Linux v0.1.2 안녕하세요, 이것은 BugBuntu의 첫 번째 알파-베타 테스트 버전입니다. 이 작은 프로젝트는 King of Bug Bounty 저장소의 팁을 기반으로 합니다. BugBuntu는 Ubuntu 18.04를 기반으로 하며 Bug Bounty 도구에 초점을 맞춘 맞춤형 배포판입니다. 설치된 일부 도구: Amass Anew Anti-burl Assetfinder CF-check Chaos Dalfox DNSgen Filter-resolved Findomain Fuff Gargs Gau Gf...

pwnkit

pwnkit 使用方法 Arch Linux と Ubuntu 18.04 でテスト済み root@kitploit: git clone https://github.com/c3l3si4n/pwnkit; make ./pwnkit...

cve-2019-5736-reproducer

CVE-2019-5736 再現ツール これにより、RunC-CVE-2019-5736があなたのKVMインスタンスで動作することを確認できます。 ワークフロー概要 このリポジトリで CVE-2019-5736 の影響を受ける docker.io 関連パッケージをビルドする LXD上でUbuntu 18.04のKVMインスタンスを起動する VM内に脆弱性のある .deb パッケージをインストールする RunC-CVE-2019-5736 で紹介されている手順を試す 脆弱性のある .deb パッケージをビルドする root@kitploit: $ docker-compose build...

CVE-2020-9484

CVE-2020-9484 参照 著者: redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + 1-dayエクスプロイトを分析したので、再モデル化しました。 説明 以前のPoCと比較して、以下の利点があります。 + Ubuntu 18.04用の環境スクリプト。 + リモートコード実行に使用するコマンドを編集できます。 + Cookie値はPoCコードにあらかじめ設定されています。 使用方法 root@kitploit: id : qerogram pw : 123...

CVE-2020-6468-PoC

CVE-2020-6468-PoC 공양을 위해 샌드박스 익스플로잇은 포함되어 있지 않습니다 PoC 환경 OS: Ubuntu 18.04 LTS 64-bit Chromium: 버전 81.0.4044.92 개발자 빌드 64-bit flags: --no-sandbox --single-process --disable-gpu 참고 자료 https://bugs.chromium.org/p/chromium/issues/detail?id=1076708...

Ubuntu 18.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8715-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8715-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8666-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8666-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

Linux Distros Unpatched Vulnerability : CVE-2026-16392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153. CVE-2026-16392 Note that Nessus...

USN-8322-2: Apache Commons BeanUtils regression

USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was incorrectly dropped. This update reintroduces the fix for CVE-2014-0114 and CVE-2019-10086. We...

USN-8369-2: mod_jk regression

USN-8369-1 fixed a vulnerability in modjk. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2023-41081 was incorrectly dropped. This update reintroduces the fix for CVE-2023-41081. We apologize for the inconvenience. Original advisory detail...

Linux Distros Unpatched Vulnerability : CVE-2025-61021

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the sqlonaturaljoincond component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8389-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8389-1 advisory. It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as...