Cygwin Elevation of Privilege Vulnerability

Cygwin is a collection of many free software programs for running UNIX-like systems on various versions of Microsoft Windows. Cygwin suffers from an elevation of privilege vulnerability that can be exploited by a remote attacker to elevate privileges...

Code injection

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges...

CVE-2016-3067

CVE-2016-3067 (Cygwin) : Cygwin prior to 2.5.0 contains a privilege escalation vulnerability caused by improper handling of updating permissions when changing users, allowing an attacker to gain privileges. The issue is described consistently across multiple sources in the connected data. The doc...

Edit and Replay Network Traffic: tcpreplay

Edit and Replay Network Traffic Tcpreplay is a suite of GPLv3 licensed utilities for UNIX and Win32 under Cygwin operating systems for editing and replaying network traffic which was previously captured by tools like tcpdump and Ethereal / Wireshark . It allows you to classify traffic as client o...

OpenSSH on Cygwin: directory traversal in SFTP client

Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can also be used for directory traversal. To reproduce: On the server:...

OpenSSH On Cygwin SFTP Client Directory Traversal

OpenSSH on Cygwin: directory traversal in SFTP client Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can also be used fo...

OpenSSH On Cygwin SFTP Client Directory Traversal Vulnerability

Portable OpenSSH supports running on Cygwin. However, the SFTP client only filters out forward slashes in dolsreaddir and the directory names "." and ".." in downloaddirinternal. On Windows, including in Cygwin, backslashes can a lso be used for directory traversal. OpenSSH on Cygwin: directory...

Windows Forensic Data Collection: IR-rescue

Windows Forensic Data Collection ir-rescue is a Windows Batch script that collects a myriad of forensic data from 32-bit and 64-bit Windows systems while respecting the order of volatility. It is intended for incident response use at different stages in the analysis and investigation process. It...

Testing TLS/SSL encryption: testssl.sh

testssl.sh is a free command line tool which checks a server’s service on any port for the support of TLS/SSL ciphers, protocols as well as some cryptographic flaws. It’s designed to provide clear output in any case. Testing TLS/SSL encryption: testssl.sh Key features Clear output: you can tell...

Cygwin DLL Hijacking

Hi @ll, Cygwin's setup-x86.exe loads and executes UXTheme.dll on Windows XP also ClbCatQ.dll and some more DLLs from its "application directory". For software downloaded with a web browser the application directory is typically the user's "Downloads" directory: see , and If UXTheme.dll or one of...

Cygwin Detection (Windows SMB Login)

Detects the installed version of Cygwin on Windows. The script logs in via smb, searches for Cygwin in the registry and gets the version. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

John the Ripper GUI Frontend: Johnny

Johnny the open source cross-platform GUI frontend for John the Ripper, the popular password cracker, written in C++ using the Qt framework. Johnny’s aim is to automate and simplify the password cracking routine on the Desktop as well as add extra functionality like session management and easy...

Babun - A Windows shell you will love!

Would you like to use a linux-like console on a Windows host without a lot of fuzz? Try out babun! Installation Just download the dist file from http://babun.github.io, unzip it and run the install.bat script. After a few minutes babun starts automatically. The application will be installed to th...

Windows shell: Babun

Would you like to use a linux-like console on a Windows host without a lot of fuzz? Try out babun! Installation Just download the dist file from http://babun.github.io , unzip it and run the install.bat script. After a few minutes babun starts automatically. The application will be installed to t...

cabextract -- directory traversal with UTF-8 symbols in filenames

Cabextract ChangeLog reports: It was possible for cabinet files to extract to absolute file locations, and it was possible on Cygwin to get around cabextract's absolute and relative path protections by using backslashes...

Single Packet Authorization: fwknop

fwknop implements an authorization scheme known as Single Packet Authorization SPA for strong service concealment. SPA requires only a single packet which is encrypted, non-replayable, and authenticated via an HMAC in order to communicate desired access to a service that is hidden behind a firewa...

Webfwlog 1.01 - Web-Based Firewall Log Analysis and Reporting

Webfwlog is a flexible web-based firewall log analyzer and reporting tool. It supports standard system logs for linux, FreeBSD, OpenBSD, NetBSD, Solaris, Irix, OS X, etc. as well as Windows XP®. Supported log file formats are netfilter, ipfilter, ipfw, ipchains and Windows XP®. Webfwlog also...