FUSE

FUSE FUSE es un sistema de pruebas de penetración diseñado para identificar vulnerabilidades de subida de archivos ejecutables no restringidos UEFU. Los detalles de la estrategia de prueba se encuentran en nuestro artículo, "FUSE: Finding File Upload Bugs via Penetration Testing", presentado en...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

CVE_2026_31694

CVE-2026-31694 Passive Scanner A passive Linux host assessment tool for CVE-2026-31694 , a FUSE readdir-cache out-of-bounds write in the Linux kernel. The scanner evaluates the running kernel, FUSE exposure, local package metadata, kernel source evidence, execution environment, and operating-syst...

CVE-2023-0386

Installation root@kitploit: make all How to use Start two terminals and in the first one type root@kitploit: ./fuse ./ovlcap/lower ./gc In the second terminal type root@kitploit: ./exp...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. root@kitploit: scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp...

CVE-2023-0386

README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable...

CVE-2022-0185

CVE-2022-0185 This repo contains demo exploits for CVE-2022-0185. There are two versions here. The non-kctf version fuse version specifically targets Ubuntu with kernel version 5.11.0-44. It does not directly return a root shell, but makes /bin/bash suid, which will lead to trivial privilege...

CVE-2026-31694-POC

CVE-2026-31694: FUSE readdir cache out-of-bounds write A missing bounds check in fs/fuse/readdir.c:fuseadddirenttocache. A FUSE server returns a dirent with namelen = 4095, which serializes to a 4120-byte record. The kernel copies it into a single 4096-byte page-cache page and overflows by 24...

CVE-2023-0386-OverlayFS

CVE-2023-0386 - OverlayFS / FUSE Original CVE source written by xkaneiki: https://github.com/xkaneiki/CVE-2023-0386/tree/main Rewritten so the exploit can be run in 1 shell original exploit requires 2 shells. root@kitploit: Compile make all Create mount point for fuse filesystem mkdir -p...

CVE-2021-33909

CVE-2021-33909 Sequoia Writeup root@kitploit: gcc exploit.c -o exploit -lpthread -DBLOCKVIAUSERFAULTFD gcc exploit.hello.c -o exploit.hello -lpthread -lfuse -DFILEOFFSETBITS=64 root@kitploit: $ mkdir dir $ ./exploit $pwd/dir id...

libewf

libewf는 Expert Witness Compression Format EWF에 접근하기 위한 라이브러리입니다. 프로젝트 정보: 상태: 실험적 라이선스: LGPL-3.0-or-later 읽기 또는 쓰기 지원 EWF 형식: SMART .s01 EWF-S01 EnCase .E01 EWF-E01 .Ex01 EWF2-Ex01 지원되지 않음: .Ex01 EWF2-Ex01 bzip2 압축 작업 진행 중 .Ex01 EWF2-Ex01 암호화 읽기 전용 지원 EWF 형식: 논리 증거 파일 LEF .L01 EWF-L01 .Lx01...

CVE-2024-44947

CVE-2024-44947 Descrizione : Nel kernel Linux, è stata risolta la seguente vulnerabilità: fuse: Inizializzare i contenuti delle pagine oltre EOF prima di impostare uptodate fusenotifystore, a differenza di fusedoreadpage, non abilita lo zeroing delle pagine perché può essere usato per modificare...

CVE-2023-0386

CVE-2023-0386 root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp...

CVE-2023-0386-go-poc

PoC em Go do CVE-2023-0386 ./main /tmp/fuse Executará o programa e criará um mount fuse no diretório "/tmp/fuse". Espera que você tenha compilado o shell no diretório raiz com o nome "shell" por padrão. Depois de executar o programa, deve haver um binário executável no diretório "/tmp/ovlmerged/"...

CVE-2023-0386-libs

Installa l'ambiente di compilazione root@kitploit: sudo apt install -y gcc libfuse-dev pkg-config Compila l'exploit root@kitploit: gcc -Wall CVE-2023-0386.c pkg-config fuse --cflags --libs -DFILEOFFSETBITS=64 -o CVE-2023-0386-exp -static -lfuse Genera lo shellcode root@kitploit: msfvenom -p...

CVE-2023-0386

Compilazione root@kitploit: make all Utilizzo Avvia due terminali, nel primo terminale inserisci root@kitploit: ./fuse ./ovlcap/lower ./gc Nel secondo terminale inserisci root@kitploit: ./exp Effetto Effetto di elevazione dei privilegi 展示效果...

CVE-2022-1011

CVE-2022-1011 Link alla correzione: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 Questa vulnerabilità è principalmente dovuta alla natura asincrona di splice, che consente di mantenere un blocco di memoria del processo...

winfsp

WinFsp · Proxy per File System di Windows WinFsp consente agli sviluppatori di scrivere i propri file system ossia "unità Windows" come programmi in modalità utente e senza alcuna conoscenza della programmazione del kernel di Windows. È simile a FUSE Filesystem in Userspace per Linux e altri...

CVE-2023-0386

التثبيت root@kitploit: make all طريقة الاستخدام افتح طرفيتين، وفي الأولى اكتب root@kitploit: ./fuse ./ovlcap/lower ./gc وفي الطرفية الثانية اكتب root@kitploit: ./exp...

CVE-2026-Termius

Relatório de Vulnerabilidades do Aplicativo Termius para macOS CVE-2026-Termius Alvo : Termius macOS Versão Testada : Mais recente em janeiro de 2026 Impacto : Execução Remota de Código RCE, Escalação Local de Privilégios LPE, Bypass de Segurança do Aplicativo 🚨 Resumo Executivo Três...