mfoc

MFOC is an open source implementation of "offline nested" attack by Nethemba. This program allow to recover authentication keys from MIFARE Classic card. Please note MFOC is able to recover keys from target only if it have a known key: default one hardcoded in MFOC or custom one user provided usi...

CVE-2015-0235-test

CVE-2015-0235-test Ansible playbook to check vulnerability for CVE-2015-0235. This is based on the test program provided by the University of Chigago link. Ansible will allow you to specify a large number of host machines to test at once. This does not patch or restart anything , it only reports ...

patch-openssl-CVE-2014-0160

patch-openssl-CVE-2014-0160 Patch openssl heartbleed with ansible Usage : pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2014-0160.yml yourinventoryfile just need to contain your server list : 192.168.0.10 webserver1.example.com webserver2.example.com db1.example.com...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

Mitigate-CVE-2023-46747

Ansible Playbook to Mitigate CVE-2023-46747 K000137353: BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747 Here is the link https://my.f5.com/manage/s/article/K000137353 How to use it 1. Git clone my repo...

flyphish

Flyphish Flyphish is an Ansible playbook allowing cyber security consultants to deploy a phishing server in the cloud for security assessments. The playbook installs and configures Gophish , Postfix and OpenDKIM on a virtual machine in the cloud. Additionally, for OPSEC purposes, the playbook...

cdt-samba-deploy

cdt-samba-deploy CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box...

cve-2021-44228

This Ansible playbook applies a global 'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true' to all users. This mitigates the CVE-2021-44228 exploit for all JVM apps on the hosts in the inventory To exec: ansible-playbook playbook.yml -i inventory...

CVE-2024-3094-patcher

Ansible Playbook for Patching xz-Utils Vulnerability CVE-2024-3094 This document details an Ansible playbook designed to address the critical vulnerability CVE-2024-3094 identified in xz-Utils versions 5.6.0 and 5.6.1. This vulnerability, classified as a backdoor, grants attackers unauthorized...

CVE-2023-20198-Fix

CVE-2023-20198-Fix This repository contains an Ansible playbook for remediating the CVE-2023-20198 vulnerability found in certain Cisco devices. It does the following: 1. Checks if the web service is running on the router by checking for the associated commands in the running config 2. Disables t...

CVE-2024-6387-Mitigation-Ansible-Playbook

CVE-2024-6387 Mitigation Ansible Playbook An Ansible Playbook to mitigate the risk of the regreSSHion RCE CVE-2024-6387 vulnerability until platforms update OpenSSH to a non-vulnerable version. The mitigation applied here is based on the Mitigation Advice provided by Red Hat. As noted there: Noti...

copy-fail-CVE-2026-31431-mitigation-ansible-playbook

CVE-2026-31431 Mitigation Playbook An Ansible playbook to apply and rollback the CVE-2026-31431 AFALG kernel module mitigation on both Debian/Ubuntu and RHEL/Rocky/AlmaLinux systems. Overview This playbook mitigates CVE-2026-31431 by disabling the vulnerable algifaead kernel module: Debian/Ubuntu...

Simple-Ansible-for-CVE-2023-20198

Simple-Ansible-for-CVE-2023-20198 This is a very simple playbook to detect and disable http/https server to prevent the vulnerability. Getting started Simply use the Cisco Always on Sandbox to test example 1. Log into sandbox router and turn on http/https server ssh [email protected]...

ansible-cve-2023-36845

ansible-cve-2023-36845 Simple and untested Ansible Playbook for discovring potential CVE-2023-36845. ansible-playbook -i inventory cve-2023-36845.yml Use the ansible.cfg to limit the output from displaying skipped hosts...

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Simple ansible playbook to patch mysql servers against CVE-2016-6662. UPDATE 20160915.2347.CEST: Kenny informed me of Patrick Forsberg's catch that the original patch did not safeguard against ../ abuse. I've now replaced the patch with one that is more stringent based...

centos-dirty-cow-ansible

Ansible CVE-2016-5195 mitigation playbook Ansible playbook to mitigate CVE-2016-5195 on CentOS/Scientific Linux with SystemTap. Automating this mitigation recipe found on Red Hat Bugzilla: https://bugzilla.redhat.com/showbug.cgi?id=1384344c13 This playbook install Kernel debuginfo packages and...

ansible-CVE-2024-3094

ansible-CVE-2024-3094 Ansible playbooks designed to check and remediate CVE-2024-3094 XZ Backdoor. These were developed with guidance from https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/. Background Running the checks to see if your Linux system is vulnerable is simp...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 scanner playbook Very simple Ansible playbook that scan the filesystem for JAR files vulnerable to Log4Shell CVE-2021-44228. The result is saved in a CSV file in the local system. How to run A value for the name of the CSV file must be passed via the localfile variable...

ansible-mitigate-copyfail-dirtyfrag

Ansible playbook to mitigate CopyFail, DirtyFrag and Fragnesia vulnerabilities Mitigate CopyFail CVE-2026-31431, DirtyFrag CVE-2026-43284 and Fragnesia CVE-2026-46300 vulnerabilities in the Linux Kernel using a simple but effective Ansible playbook. Use this Ansible Playbook to run against your...