ssh-hardening

SSH-Härtung SSH auf Debian/Ubuntu in einem Durchgang absichern: neuer Port, kein Root-Login, schlüsselbasierte Authentifizierung, optional UFW und Fail2Ban. Was Sie sehen werden Wenn Sie das Skript ausführen, erkennt es Ihr Betriebssystem und zeigt die Einstellungen an, bevor es fragt, ob Sie...

JShielder

JShielder JShielder — автоматизированный скрипт для усиления защиты Linux-серверов JSHielder — это открытый Bash-скрипт, разработанный для помощи системным администраторам и разработчикам в защите их Linux-серверов, на которых они будут развертывать веб-приложения или службы. Этот инструмент...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: banir hosts que causam múltiplos erros de autenticação O Fail2Ban verifica arquivos de log como /var/log/auth.log e bane endereços IP que realizam muitas tentativas de login falhadas. Ele faz isso...

THM-MagnusBilling-CVE-2023-30258-Exploit

THM-MagnusBilling-CVE-2023-30258 Perfekt! Lassen Sie uns Ihre vollständige Ausarbeitung in professionelles Deutsch umwandeln, bereit für ein GitHub-Repository. Ich habe es auch für Klarheit und Lesbarkeit poliert – dies ist Material auf Portfolio-Niveau. ⸻ 🛡️ MagnusBilling RCE → Root CVE-2023-3025...

fail2ban

root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...

fail2ban-log4j

fail2ban-log4j fail2ban फ़िल्टर जो log4j CVE-2021-44228 के विरुद्ध हमलों को पकड़ता है स्थापना इस फ़ाइल को अपने fail2ban filter.d निर्देशिका में कॉपी करें, जो आमतौर पर कुछ इस प्रकार होता है /etc/fail2ban/filter.d या समान। अपने jail.local या jail.conf में एक apache-jndi अनुभाग जोड़ें: root@kitploit...

Room-Walkthrough-Billing

🧠 Passo a passo da Sala: Billing Escrito por: Aditya Bhatt | Colaborador Open Source 📦 Visão Geral Neste passo a passo, vamos a fundo na Sala Billing , mostrando uma instância vulnerável do MagnusBilling, uma suculenta RCE sem autenticação CVE-2023-30258 e uma configuração incorreta do sudo no...

vallumd

vallumd Dieses Programm ermöglicht es Ihnen, IP-Blacklists zu zentralisieren und zu verteilen. Wenn Sie einen Server im Internet betreiben, sind Sie sehr wahrscheinlich schon auf einen oder mehrere Brute-Force-Angriffe gestoßen. Kein Problem, installieren Sie einfach fail2ban. Erledigt. Aber wenn...

nginx-ultimate-bad-bot-blocker

...

Proxmox-Network-Lab

Proxmox Network Lab + Hardening Despliegue de servicios corpo...

CVE-2026-43634

HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...

EUVD-2026-30935

HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...

CVE-2026-43634

CVE-2026-43634 affects HestiaCP versions 1.2.0–1.9.4. The vulnerability is an IP spoofing flaw: unauthenticated attackers can send arbitrary IPs via the CF-Connecting-IP header, bypassing authentication controls and Cloudflare network verification. This can defeat fail2ban brute-force protections...

CVE-2026-43634 HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header

HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...

CVE-2026-43634 HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header

HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...

CVE-2026-43634 HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header

HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...

WordPress WP fail2ban – Advanced Security plugin <= 5.3.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability

Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WP fail2ban versions = 5.3.4...

Exploit for OS Command Injection in Magnussolution Magnusbilling

THM-MagnusBilling-CVE-2023-30258 Perfect! Let’s convert your f...

Exploit for OS Command Injection in Magnussolution Magnusbilling

THM-MagnusBilling-CVE-2023-30258 Perfect! Let’s convert your f...

CVE-2022-38337

When aborting a SFTP connection, MobaXterm before v22.1 sends a hardcoded password to the server. The server treats this as an invalid login attempt which can result in a Denial of Service DoS for the user if services like fail2ban are used...