CVE-2020-8165

README This README would normally document whatever steps are necessary to get the application up and running. Things you may want to cover: Ruby version System dependencies Configuration Database creation Database initialization How to run the test suite Services job queues, cache servers, searc...

SMBCompScan

SMBCompScan Script de escaneo para identificar hosts vulnerables a CVE-2020-0796 Aviso Aviso legal Este script puede ayudar a identificar máquinas con la vulnerabilidad SMBv3 comprobando si la compresión está habilitada. Aún así, podría devolver 'vulnerable' para máquinas que tengan instalado...

salt-security-backports

Se pueden solicitar parches oficiales para versiones anteriores en: https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ Los parches aquí son personalizados y pueden diferir de los oficiales ⚠ Parches de seguridad retroportados para versiones no compatibles de Salt Los parches en este...

rauc-1.5-integration

Integración de RAUC 1.5 Este repositorio contiene ejemplos para simplificar la integración de la actualización RAUC en proyectos existentes. Puede suscribirse a https://github.com/rauc/rauc-1.5-integration/issues/1 para recibir notificaciones de actualizaciones importantes de este repositorio y d...

snyk-js-jquery-565129

Este repositorio contiene los parches para CVE-2020-11022 y CVE-2020-11023 que afectan a todas las versiones de jQuery anteriores a la 3.5.0, incluyendo los parches de DanielRuf/snyk-js-jquery-174006. Estos parches se generaron con diff -u original patched patchfile. Aplicar los parches Puede...

externalip-webhook

externalip-webhook creado para abordar CVE-2020-8554 Nota: Este chart está obsoleto para la versión 1.21 de Kubernetes y no es compatible a partir de 1.22. Para mitigar CVE-2020-8554, habilita el controlador de admisión DenyServiceExternalIPs en el clúster. externalip-webhook es un webhook de...

CVE-2020-36109-POC

CVE-2020-36109-POC Repositorio movido aquí:https://github.com/sunn1day/CVE-2020-36109-POC...

CVE-2020-1034

CVE-2020-1034 Warning This repository contains a working exploit. Publication was made for educational purposes only. Owner of this repository is not responsible for any damage done by any part of source code published here. This repository was created as a homework for "Protected Information...

ghostcatch

ghostcatch Python to disable AJP connectors in Apache Tomcat to remediate CVE-2020-1938 Ghostcat! Currently written for: Python 2.7 Requires: pip install progress Usage: python ghostCatch.py root@kitploit: -help is the flag for usage Example: python ghostCatch.py -help -path is the flag to specif...

Cyber-Attack-Analysis

Caso de Estudio de Ciberseguridad: La Brecha de Virgin Mobile KSA en 2020 📌 Resumen Ejecutivo En 2020, un incidente de seguridad significativo comprometió a Virgin Mobile KSA, provocando el robo de datos sensibles, incluyendo comunicaciones de empleados e información personal de más de 1,000...

CVE-2020-12446

CVE-2020-12446 Puedes consultar el WriteUp para una explicación detallada. Si quieres ejecutarlo en 25h2 debes cambiar un offset y se proporciona en la línea de comentario...

jackson-CVE-2020-36180

Este repositorio no tiene un README...

CVE-2020-1472

This repository does not have a README...

gatekeeper-cve-2020-8554

Gatekeeper constraint for CVE-2020-8554 Install OPA client Follow the instructions. Run unit tests root@kitploit: $ opa test --ignore=.yaml ./policies verbose output $ opa test -v --explain=full --format=pretty --ignore=.yaml ./policies...

CVE-2020-1472-ZeroLogon-Demo-Detection-Mitigation

CVE-2020-1472 ZeroLogon Detection and Mitigation Demo This project demonstrates the detection and mitigation of the critical Windows vulnerability CVE-2020-1472, also known as ZeroLogon. The vulnerability allows attackers to gain unauthenticated administrative access. This was developed as part o...

mojarra-2.2.13-patched

Mojarra 2.2.13 – CVE-2020-6950 Backport This repository contains a reproducible backport of the fix for CVE-2020-6950 to Mojarra 2.2.13. It exists primarily for traceability and for maintaining legacy applications which, for compatibility reasons, cannot simply be upgraded to a newer JSF/Mojarra...

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Tomcat AJP 协议文件读取 / 文件包含漏洞利用 POC 的 python3 转换版 。 原版（python2）作者: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi 用法 root@kitploit: python3 "Tomcat-ROOT路径下文件包含CVE-2020-1938-python3.py" -...

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting

Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting A stored cross-site scripting XSS in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Nagios Log Server 2.1.7 and older versions are affected...

Internet-Security-Project

Internet-Security-Project Here you can find my relation about the project I made for the Internet Security course. The relation is in Italian. Because I written it in Latex, you can also find the Latex source files. The project talks about Maltego vulnerability CVE-2020-24656, which allows an...

Windows-Kernel-Exploitation

1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...