bash-cve-2014-6271-fixes

CVE-2014-6271 的 bash 补丁 最初的邮件列表帖子只允许你通过未认证的 HTTP 获取补丁。 唉 我已通过 HTTP 下载了这些文件，并将它们放入一个 git 仓库中，你可以通过 HTTPS 获取并独立核验。 我尚未核验这些文件是否真实，但你可以独立检查自己拥有的文件是否相同。 原始公告 SHA256SUMS == 上游补丁 == 从 http://ftp.gnu.org/pub/gnu/bash/bach--patches/ 获取 upstream/bash30-017 upstream/bash31-018 upstream/bash32-052...

rp

rp++: a fast ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries Overview rp++ or rp is a C++ ROP gadget finder for PE/ELF/Mach-O executables and x86/x64/ARM/ARM64 architectures. Finding ROP gadgets To find ROP gadget you need to specify a file with the --file / -f option and use the...

rustcat

rustcat - The modern port listener and reverse shell What is Rustcat Rustcat is an easy to use port listener and reverse shell for Linux, MacOS, and Windows aimed to be easy to use and accessible. Modes Listen mode listen; Reverse shell mode connect; Features Command history & Tab completion...

wireguard-initramfs

wireguard-initramfs Usa dropbear sobre wireguard. Habilita la red wireguard durante el arranque del kernel, antes de que se monten las particiones cifradas. Combinado con dropbear esto puede habilitar el arranque remoto TOTALMENTE CIFRADO sin almacenar material de claves ni exponer puertos en la...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

patch-openssl-CVE-2014-0160

patch-openssl-CVE-2014-0160 使用 Ansible 修补 openssl heartbleed（心脏出血漏洞） 使用方法： root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2014-0160.yml yourinventoryfile 只需包含你的服务器列表： root@kitploit: 192.168.0.10 webserver1.example.com webserver2.example.com...

pinecone

Pinecone is a WLAN networks auditing tool, suitable for red team usage. It is extensible via modules, and it is designed to be run in Debian-based operating systems. Pinecone is specially oriented to be used with a Raspberry Pi, as a portable wireless auditing box. This tool is designed for...

pinecone

Pinecone 是一款WLAN网络审计工具，适用于红队使用。它可以通过模块进行扩展，并设计在基于Debian的操作系统上运行。Pinecone 特别适用于配合树莓派作为便携式无线审计盒子。 此工具仅用于教育和研究目的。仅在获得明确许可的情况下使用。 安装 要运行Pinecone，您需要一个基于Debian的操作系统（已在Raspbian、Raspberry Pi Desktop和Kali Linux上进行过测试）。Pinecone 有以下依赖项： Python 3.5+ 。您的发行版可能已预装Python3，如果未安装，可以使用 apt-get install python3 进行安装...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

harbian-audit

harbian-audit审计与加固 简介 本项目是面向 Debian GNU/Linux、CentOS 8 和 Ubuntu 发行版的安全审计与加固工具。当前主要测试环境为 Debian GNU/Linux 9/10/11/12/13、CentOS 8 以及 Ubuntu 22，其他版本尚未经过充分测试。本项目主要面向服务器场景，暂未针对桌面环境实现对应检查项。 本项目基于 OVH-debian-cis 框架，并结合 Debian GNU/Linux 9 的一些特性进行了优化。同时参考了安全合规基线 STIG（STIG RedHatEnterpriseLinux7V2R5 及 STIG...

kali-cloud

FAI Generador de imágenes para la nube Este repositorio tiene como objetivo crear imágenes de Kali para todos los proveedores de nube. Es un fork de: https://salsa.debian.org/cloud-team/debian-cloud-images/ Primeros pasos Necesitarás una copia checkout de este repositorio en tu disco y un paquete...

CVE-2015-3306

ProFTPd 1.3.5 远程命令执行 作者 ： David Tavarez @davidtavarez 软件： ProFTPd 1.3.5 with modcopy 测试环境 ： Debian 4+deb7u2 ProFTPD 1.3.4a Debian-4+deb7u1 ProFTPD 1.3.4a CVE ： 2015-3306...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

CVE-2015-0235-cookbook

CVE-2015-0235-cookbook 本 cookbook 用于测试你是否受到 CVE-2015-0235 漏洞的影响。 当前行为在测试失败时会报错： root@kitploit: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end 基于 Debian 的系统： CVE-2015-0235 基于 RHEL 的系统： CVE-2015-0235 支持平台 Debian / Ubuntu CentOS /...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

mariana-trench

Mariana Trench Mariana Trench is a security focused static analysis platform targeting Android. This guide will walk you through setting up Mariana Trench on your machine and get you to find your first remote code execution vulnerability in a small sample app. These instructions are also availabl...

Converto

Converto V2 用于 VPS 的自动化 Kali Linux 或 Parrot OS 安装程序 root@kitploit: 在 VPS 服务器上安装 Kali linux 或 Parrot OS 已在 Ubuntu 上测试 已在 Debian 上测试 它还能安装 VNC（图形化/非图形化 VNC） 安装步骤 :- 视频：如何安装 IMAGE ALT TEXT HERE 1.sudo apt-get update...

vaas-cve-2015-5477

Vulnerability as a Service - CVE 2015-5477 一个运行 Debian Wheezy Linux 系统的容器，使用了存在漏洞的 bind9 版本，用于展示 CVS-2015-5477。 概述 此 Docker 容器基于 Debian Wheezy，并已修改为使用存在漏洞的 bind9 版本及其对应的附加依赖项。 使用方法 使用 docker pull hmlio/vaas-cve-2015-5477 获取容器。 通过端口映射运行容器（为了达到最大程度的“我去！真糟糕！”效果，建议在前台启动容器而不作为后台进程）： docker run -p...

autotimeliner

AutoTimeliner Automagically extract forensic timeline from volatile memory dumps. AutoTimeliner runs multiple Volatility3 plugins against Windows, Linux, and macOS memory images, then merges their output into a single, sorted CSV timeline: Generic Timeline Plugin Plugin| What it captures ---|---...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...