265 matches found
vallumd
vallumd This program allows you to centralize and distribute IP blacklists. If you maintain a server on the Internet, it's very likely you encountered one or more brute force attacks. Not a problem, just install fail2ban. Done. But if you're running multiple servers, each of them running their...
fail2ban
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: ban hosts that cause multiple authentication errors Fail2Ban scans log files like /var/log/auth.log and bans IP addresses conducting too many failed login attempts. It does this by updating system...
nginx-ultimate-bad-bot-blocker
REPO| BECOME A SPONSOR ---|--- | Your logo and link to your domain will appear here if you become a sponsor. Simply email me on [email protected] if you would like to sponsor this project as South Africa is not supported yet under the Github sponsor program. | Help Support Me at...
JShielder
JShielder JShielder Automated Hardening Script for Linux Servers JSHielder is an Open Source Bash Script developed to help SysAdmin and developers secure there Linux Servers in which they will be deploying any web application or services. This tool automates the process of installing all the...
THM-MagnusBilling-CVE-2023-30258-Exploit
THM-MagnusBilling-CVE-2023-30258 ⸻ 🛡️ MagnusBilling RCE → Root CVE-2023-30258 📌 Resumen • Objetivo: 10.145.148.203 • Plataforma: TryHackMe • Vulnerabilidad: CVE-2023-30258 • Acceso: Ejecución Remota de Código RCE sin autenticación • Escalada de Privilegios: mala configuración de fail2ban • Acceso...
Room-Walkthrough-Billing
🧠 Recorrido de la Sala: Billing Escrito por: Aditya Bhatt | Colaborador de Código Abierto 📦 Resumen En este recorrido, nos lanzamos de lleno a la Sala Billing , mostrando una instancia vulnerable de MagnusBilling, un jugoso RCE sin autenticación CVE-2023-30258 y una mala configuración de sudo en...
fail2ban
root@kitploit: / | | | | / | | |/ /| ' / | ' \ || ,||/|./,|||| v1.1.0.dev1 20??/??/?? Fail2Ban: 複数の認証エラーを引き起こすホストをBANする Fail2Banは、/var/log/auth.log...
fail2ban-log4j
fail2ban-log4j Filtro de fail2ban que detecta ataques contra log4j CVE-2021-44228 Instalación Copia este archivo en tu directorio filter.d de fail2ban, que suele ser algo como /etc/fail2ban/filter.d o similar. Añade una sección apache-jndi a tu jail.local o jail.conf: root@kitploit: apache-jndi...
htb-machine-ringdown
htb-machine-ringdown Detailed design & exploitation writeup for Ringdown—an original Debian/Asterisk vulnerable machine featuring CVE-2024-42365 AMI, PJSIP pre-hash cracking, and Fail2ban POSIX ACL privilege escalation...
ssh-hardening
Fortalecimiento de SSH Bloquea SSH en Debian/Ubuntu de una sola ejecución: nuevo puerto, sin inicio de sesión como root, autenticación basada en clave, UFW y Fail2Ban opcionales. Lo que verás Cuando ejecutes el script, detecta tu SO y muestra la configuración antes de preguntar si continuar: Inic...
Proxmox-Network-Lab
Proxmox Network Lab + Hardening Despliegue de servicios corpo...
EUVD-2026-30935
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...
CVE-2026-43634
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...
CVE-2026-43634
CVE-2026-43634 affects HestiaCP versions 1.2.0–1.9.4. The vulnerability is an IP spoofing flaw: unauthenticated attackers can send arbitrary IPs via the CF-Connecting-IP header, bypassing authentication controls and Cloudflare network verification. This can defeat fail2ban brute-force protections...
CVE-2026-43634 HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...
CVE-2026-43634 HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...
CVE-2026-43634 HestiaCP 1.2.0-1.9.4 IP Spoofing via CF-Connecting-IP Header
HestiaCP versions 1.2.0 through 1.9.4 contain an IP spoofing vulnerability that allows unauthenticated remote attackers to bypass authentication security controls by supplying an arbitrary IP address in the CF-Connecting-IP HTTP header without verifying the request originated from Cloudflare's...
WordPress WP fail2ban – Advanced Security plugin <= 5.3.4 - Unauthenticated Reflected Cross-Site Scripting vulnerability
Unauthenticated Reflected Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin WP fail2ban versions = 5.3.4...