weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2021-3156

CVE-2021-3156 toc 漏洞简介 漏洞编号: CVE-2021-3156 漏洞评分: 漏洞产品: linux sudo 影响范围: 1.8.2-1.8.31sp12; 1.9.0-1.9.5sp1 利用条件: linux 本地；sudo为suid且可运行 利用效果: 本地提权 源码获取: https://www.sudo.ws/getting/source/ 环境搭建 docker 环境: chenaotian/cve-2021-3156 我自己搭建的docker，提供了： 1. 自己编译的可源码调式的sudo 2. 有调试符号的glibc 3. gdb 和gdb插件pwng...

smolvm

smolvm Branchable microVMs for AI agents. Embed them in your app, ship them as a file, and run them free on your own machine. Install curl -sSL https://smolmachines.com/install.sh | bash macOS + Linux Windows: unzip the windows-x8664 release and run smolvm.exe needs the Windows Hypervisor Platfor...

metasploitable3

Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...

nmlinux

NMLinux · v1.7.12 Un kit de herramientas de red unificado para Linux y macOS — inspecciona, conecta, diagnostica. NMLinux es una interfaz gráfica única y unificada que reúne 29 módulos de red en una sola ventana: monitoreo de interfaces, Wi-Fi, DNS, terminal SSH, visor de firewall, mapa de...

log4j-ioc-detector

Detector de IoC de log4j en Linux Un script Bash básico para detectar indicadores de compromiso IoC de log4j en Linux. Cómo Usar 1. Clona este repositorio: git clone https://github.com/santosomar/log4j-ioc-detector 2. Ejecuta el script log4jiocdetector.sh, como se muestra a continuación: bash sud...

rtl8812au

RTL8812AU/21AU 与 RTL8814AU 无线驱动 仅适用于 Linux 和 Android 这些驱动已弃用。 请使用 mac80211 驱动，地址为 https://github.com/lwfinger/rtw88 重要说明！ 使用 "ip" 和 "iw" 代替 "ifconfig" 和 "iwconfig" 详细说明见下文，请阅读 README！ 注意：TP-Link AC600 及其他设备存在回归问题。目前的临时解决方案是从之前的提交中拉取代码。请参阅 此评论。 IPERF3 基准测试 设备 Alfa Networks AWUS036ACH 芯片组 88XXau...

CVE-2014-3153

Towelroot para Ubuntu x86 Este exploit ha sido probado en ubuntu 14.04 x86 y ubuntu 12.04.2 x86 con éxito. Aprendiendo CVE2014-3153 y towelroot. Kernel hasta la versión 3.14, usa rbtree para almacenar rtwaiter no plistnode, ¡más complejo! IA tiene threadinfo diferente a ARM!! Fuente de...

SimplesApachePathTraversal

SimplesApachePathTraversal Simples Apache Path Traversal Es una herramienta simple para probar la vulnerabilidad Apache Path Traversal https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html Autor: MrCl0wn Blog: https://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitte...

rifiuti2

Introduction Rifiuti2 is a for analyzing Windows Recycle Bin INFO2 file. Analysis of Windows Recycle Bin is usually carried out during Windows computer forensics. Rifiuti2 can extract file deletion time, original path and size of deleted files and whether the trashed files have been permanently...

exploitgym

ExploitGym ExploitGym es un benchmark realista a gran escala construido a partir de vulnerabilidades reales en programas de espacio de usuario, el motor V8 de Google y el kernel de Linux, diseñado para evaluar la capacidad de los agentes de IA para desarrollar exploits. Inicio rápido 1. Python de...

digital-forensics-lab

Digital Forensics Lab & Shared Cyber Forensic Intelligence Repository Features of Repository Interactive Digital Forensics Labs: Tailored for students and faculty engagement Linux-Centric Lab Environment: Utilizes Kali Linux exclusively for all labs Visual Learning Support: Each lab includes...

digital-forensics-lab

数字取证实验室与共享网络取证情报库 本仓库特点 交互式数字取证实验室： 专为学生和教师参与而设计 以Linux为中心的实验环境： 所有实验均使用Kali Linux 可视化学习支持： 每个实验包含PowerPoint演示文稿、相关文件和教学截图 全面覆盖： 涵盖数字取证领域的广泛主题 开源工具： 所有使用的工具均为自由开源软件 持续更新： 由美国司法部（DOJ）、国土安全部（DHS）和国家科学基金会（NSF）资助，团队致力于定期更新仓库 取证情报集成： 两个基于真实案例研究的结构化取证情报数据集（JSON格式） 如需反馈或告知您正在使用本课程材料，请通过电子邮件联系 wxu at uba...

Meltdown

Meltdown PoC para Meltdown en linux CVE-2017-5754 Uso cd meltdown make ./meltdown address size Ejemplo Referencia http://zzado.tistory.com/category/Report...

kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

A flaw was found in the Linux kernel, specifically within the RDMA Remote Direct Memory Access vmwpvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdmaallocucontext...

kernel: RDMA/rxe: Fix double free in rxe_srq_from_init

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem, specifically within the rxe driver. An error in the rxesrqfrominit function's memory management can lead to a double free vulnerability. This occurs when an attempt to copy data to user space fails, causing the sam...

kernel: net: ipv6: use-after-free in fib6_rule_suppress due to stale res->rt6 pointer

A use-after-free vulnerability was found in the Linux kernel's IPv6 FIB rule lookup path. In fib6rulesuppress, when a route is suppressed and released via ip6rtputflags, the res-rt6 pointer is not cleared. If no later rule supplies a replacement route, fib6rulelookup returns the stale freed rt6in...

Important: Red Hat Security Advisory: kpatch-patch-5_14_0-570_116_1, kpatch-patch-5_14_0-570_135_1, kpatch-patch-5_14_0-570_39_1, kpatch-patch-5_14_0-570_66_1, and kpatch-patch-5_14_0-570_94_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: RDMA/mana: Validate rx_hash_key_len

A flaw was found in the Linux kernel's RDMA/mana component. A local user could exploit this vulnerability by providing an invalid rxhashkeylen value through a user-space API uAPI structure. This invalid value is then used in a memcpy operation without proper bounds checking, allowing the user to...

snoop

snoop 一个基于 eBPF 构建的 Linux 系统调用跟踪器。类似于 strace，但拥有实时 TUI、智能过滤器以及真正可读的参数解码。 $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/1234 read4, 0x7f3a1c000b20, 4096 = 4096 0.003 curl1234/1234 socketAFINET, SOCKSTREAM,...