nhi-zero-trust-bypass

项目：利用协议漏洞操纵非人类身份秘密并绕过零信任策略 截图 以下是演示的真实截图。更多信息请参阅 screenshots/README.md。 1. DNS 漏洞利用（BIND 崩溃） A. 发送漏洞利用数据包 Scapy 向 BIND 发送一个格式错误的 TSIG DNS 数据包（参见dnsexploit.py）。 B. 确认容器崩溃 docker ps -a 显示 BIND 容器在漏洞利用后已退出。 C. 崩溃日志证据 来自docker logs vulnerablebind 的相关断言失败和崩溃日志。...

openssh: OpenSSH: ssh-agent allows remote execution of local operations

A flaw was found in OpenSSH's ssh-agent component. A misinteraction between agent locking and the [email protected] extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS11 tokens or utilize keys with destination...

cve-2010-4221

cve-2010-4221 Este exploit fue escrito para estudiar algunos conceptos, ¡disfrútalo! Uso root@kitploit: Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format Solo...

openssh: OpenSSH: ssh-agent allows remote execution of local operations

A flaw was found in OpenSSH's ssh-agent component. A misinteraction between agent locking and the [email protected] extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS11 tokens or utilize keys with destination...

EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2026-3861)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

EulerOS Virtualization 2.10.1 : bind (EulerOS-SA-2026-3827)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

metasploitable2-vsftpd-exploitation

Metasploitable 2 - vsFTPd 2.3.4 漏洞利用实验室 概述 本项目演示了针对一个故意存在漏洞的机器 Metasploitable 2 的渗透测试工作流程。 目标在于识别、利用并分析 FTP 服务中的一个已知漏洞，最终实现 root 级别访问 并评估安全影响。 实验环境搭建 攻击机： Ubuntu（虚拟机） 目标机： Metasploitable 2（虚拟机） 网络配置： 仅主机网络（192.168.56.0/24） 目标验证 验证了目标系统及其网络配置： root@kitploit: whoami hostname ifconfig 连通性检查...

PoC-for-CVE-2025-9074

CVE-2025-9074 - PoC de Acceso No Autenticado a la API de Docker 📌 Descripción general Este repositorio proporciona un exploit de Prueba de Concepto PoC para CVE-2025-9074 , que implica la exposición no autenticada de la API de Docker Engine en el puerto TCP 2375. Un atacante que pueda acceder a...

Updated bind package fixes security vulnerabilities

Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...

MGASA-2026-0422 Updated bind package fixes security vulnerabilities

Unauthenticated IXFR deltas are applied to the live zone before TSIG verification CVE-2026-19033. qpcache NOQNAME proof use-after-free crashes recursive resolver CVE-2026-19662. Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path CVE-2026-19666. Remote assertion failure via 16-bit...

CVE-2020-0796

CVE-2020-0796 PoC de Exploit Funcionando CVE-2020-0796 - Reverse Bind Shell Probado usando Python2.7 Para Instalar: pip install -r requirements.txt Para Ejecutar: python CVE-2020-0796-POC.py 10.16.1.24 -lhost 10.1.1.1 -lport 4444...

SLAE

SecurityTube Linux Assembly Expert Esta entrada de blog ha sido creada para cumplir los requisitos de la certificación SecurityTube Linux Assembly Expert: http://securitytube-training.com/online-courses/securitytube-linux-assembly-expert/ ID de estudiante: SLAE-1134 Artículos Tarea 1: Shell bind...

cve-2026-5950-bind9-resolver-dos

CVE-2026-5950 - DoS del Resolvedor de BIND 9 Notas de investigación y guía defensiva para CVE-2026-5950, una vulnerabilidad de bucle de reenvío ilimitado en la máquina de estados del resolvedor de BIND 9. Descripción general CVE-2026-5950 afecta a resolvedores recursivos de BIND 9. Bajo condicion...

CVE-2026-19941

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:38+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

CVE-2026-19668

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:37+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

CVE-2026-19662

creationtimestamp| type| source ---|---|--- 2026-09-18 04:45:32+00:00| seen| https://www.hkcert.org/security-bulletin/isc-bind-multiple-vulnerabilities20260918...

EulerOS Virtualization 2.12.1 : bind (EulerOS-SA-2026-3576)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

ISC BIND 9.18.0 < 9.20.29 / 9.18.11-S1 < 9.20.29-S1 / 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 Multiple Vulnerabilities

The version of ISC BIND running on the remote host is 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.18.11-S1 through 9.18.50-S1 and 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by multiple...

ISC BIND 9.20.0 < 9.20.29 / 9.20.9-S1 < 9.20.29-S1 / 9.21.0 < 9.21.26 DoS (CVE-2026-77692)

The version of ISC BIND running on the remote host is 9.20.0 through 9.20.27 or 9.21.0 through 9.21.25. Supported Preview Edition releases 9.20.9-S1 through 9.20.27-S1 are also affected. It is, therefore, affected by a vulnerability : - An attacker can cause named to abort by sending a crafted...

EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2026-3489)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a special...