68 matches found
cve-2023-0386
This repository does not have a README...
CVE-2023-0386-CTF
This repository does not have a README...
CVE-2023-0386-go-poc
Go PoC of CVE-2023-0386 ./main /tmp/fuse Will run the program and create a fuse mount on "/tmp/fuse" directory. Expects you've compiled the shell in the root directory with a name of "shell" by default. After you've run the program, there should be an executable binary in the "/tmp/ovlmerged/"...
CVE-2023-0386
安装 root@kitploit: make all 使用方法 打开两个终端，在第一个终端中输入 root@kitploit: ./fuse ./ovlcap/lower ./gc 在第二个终端中输入 root@kitploit: ./exp...
linux-4.19.72_CVE-2023-0386
Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...
CVE-2023-0386
CVE-2023-0386...
TwoMillion-Machine-Writeup
About Machine TwoMillion is an Easy difficulty Linux box that was released to celebrate reaching 2 million users on HackTheBox. The box features an old version of the HackTheBox platform that includes the old hackable invite code. After hacking the invite code an account can be created on the...
HTB-TwoMillion-Writeup
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...
CVE-2023-0386
CVE-2023-0386 root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...
CVE-2023-0386-libs
Install compilation environment root@kitploit: sudo apt install -y gcc libfuse-dev pkg-config Compile exploit root@kitploit: gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Generate shellcode root@kitploit: msfvenom -p linux/x86/ex...
CVE-2023-0386
Compilation root@kitploit: make all Usage Start two terminals, in the first terminal enter root@kitploit: ./fuse ./ovlcap/lower ./gc In the second terminal enter root@kitploit: ./exp Effect Privilege escalation effect Effect demonstration...
CVE-2023-0386
CVE-2023-0386 WIP...
CVE-2023-0386
Installation root@kitploit: make all How to use Start two terminals and in the first one type root@kitploit: ./fuse ./ovlcap/lower ./gc In the second terminal type root@kitploit: ./exp...
Exploit for Improper Ownership Management in Debian Debian_Linux
HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup —...
K000152448: Linux kernel vulnerability CVE-2023-0386
Security Advisory Description A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug...
CISA Warns of Active Exploitation of Linux Kernel Privilege Escalation Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday placed a security flaw impacting the Linux kernel in its Known Exploited Vulnerabilities KEV catalog, stating it has been actively exploited in the wild. The vulnerability, CVE-2023-0386 CVSS score: 7.8, is an improper...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2023-0386link is external Linux Kernel Improper Ownership Management Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...
Linux OverlayFS Local Privilege Escalation Exploit
This Metasploit module exploit targets the Linux kernel bug in OverlayFS. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mou...
