130 matches found
Windows-Local-Privilege-Escalation-Cookbook
Windows Local Privilege Escalation Cookbook Table of Contents Windows Local Privilege Escalation Cookbook Table of Contents Disclaimer Description Keynote Definition Useful Tools Vulnerabilities References Disclaimer This repository, "Windows Local Privilege Escalation Cookbook" is intended for...
netlas-cookbook
Netlas CookBook El objetivo de esta guía es enseñar a cualquier persona interesada en ciberseguridad, independientemente de su nivel de conocimiento, cómo aprovechar al máximo las herramientas de búsqueda de Netlas. Es una lectura extensa. Hemos recopilado la mayor cantidad posible de casos de us...
chef_tissues
Tissues Install patch for CVE-2017-0145 AKA WannaCry. More Info: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Usage: root@kitploit: "name":"mynode", "runlist": "recipetissues"...
CVE-2015-0235-cookbook
Libro de recetas CVE-2015-0235 Este libro de recetas probará si eres vulnerable a CVE-2015-0235. El comportamiento actual mostrará un error cuando la prueba falle: root@kitploit: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end...
bash-cve-2014-7169-cookbook
bash-cve-2014-7169-cookbook Ensures bash 'shellshock' vulnerability is patched. Based on blog post written by Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...
cookbook-bash-CVE-2014-6271
bash-CVE-2014-6271 Cookbook Este cookbook de Chef contiene una receta predeterminada que hará fallar su ejecución de Chef si se encuentra un bash y ese bash es vulnerable al exploit remoto descrito en CVE-2014-6271. Los lugares para buscar bash se pueden configurar en el atributo...
CVE-2014-3566-poodle-cookbook
CVE-2014-3566-poodle Este cookbook lanzará un error en tu ejecución de chef si tu servidor es vulnerable a CVE-2014-3566. Aunque este cookbook puede usarse para monitorear ejecuciones fallidas de chef, también es una prueba de concepto. Plataformas soportadas Ubuntu 12.04 Centos-6.4 Atributos...
chef-os-hardening
os-hardening cookbook de Chef Descripción Este cookbook proporciona numerosas configuraciones relacionadas con la seguridad, ofreciendo una protección base integral. Configura: Configura la gestión de paquetes, p. ej. solo permite paquetes firmados Elimina paquetes con problemas conocidos Configu...
chef-ssh-hardening
ssh-hardening Chef cookbook Description This cookbook provides secure ssh-client and ssh-server configurations. This cookbook does not provide capabilities for management of users and/or ssh keys, please use other cookbooks for that. Requirements Chef = 14.13.11 Platform Debian 8, 9, 10 Ubuntu...
threat-model-cookbook
OWASP Threat Model Cookbook Project This project is about creating and publishing threat model examples. They can be in the form of code, graphical or textual representations. The models will use diverse technologies, methodologies and techniques. You can learn from those models, use them a base ...
bash-shellshock
bash-shellshock Cookbook This cookbook is designed to test and optionally remediate the bash "shellshock" bug, more formally known as cve-2014-7169. Once Chef-client has executed this recipe on one or more hosts, a list of all nodes that are vulnerable to the "Shellshock" exploit can be retrieved...
cookbook-update-glibc
cookbook-update-glibc Resumen cookbook para actualizar glibc. CVE-2015-0235 GHOST Japonés http://www.walbrix.com/jp/blog/2015-01-ghost.html Inglés http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Descripción Actualiza glibc mediante Chef Solo. Atención: este cookbook requiere reinici...
CVE-2026-55747
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.joinworkdir, p wrapper with no canonicalization or containment check, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Severity reflects that this...
CVE-2026-55747
The CVE-2026-55747 entry concerns the pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow. The root cause is a _path(workdir, p) helper that simply wraps os.path.join(workdir, p) with no canonicalization or containment checks. Because os.path.join can preserve absolute paths and doe...
CVE-2023-31128
NextCloud Cookbook is a recipe library app. Prior to commit a46d9855 on the master branch and commit 489bb744 on the main-0.9.x branch, the pull-checks.yml workflow is vulnerable to command injection attacks because of using an untrusted github.headref field. The github.headref value is an...
