asminject

asminject.py asminject.py è un fork pesantemente modificato del progetto dlinject di David Buchanan. Inietta payload arbitrari in assembly o binari precompilati direttamente nei processi Linux x86-64, x86 e ARM32 accedendo a /proc//mem invece di agganciarsi tramite ptrace. Utile per manomettere...

xpid

xpid Es ist nmap aber für PIDs. 🤓 Bitte helfen Sie mir, ein unabhängiger Programmierer zu werden, indem Sie direkt unten spenden. xpid gibt einem Benutzer die Möglichkeit, Prozessdetails auf einem Linux-System zu „untersuchen“. Zum Beispiel hat ein schlafender Thread ein Verzeichnis /proc/pid, da...

Hawk

Hawk Intercetta silenziosamente le credenziali SSH e SU in tempo reale Hawk monitora i processi sshd e su, estraendo le password dalla memoria tramite ptrace senza modificare i processi target. Zero scritture. Pura raccolta di credenziali in sola lettura. Demo Come Funziona Hawk sfrutta il...

process-injection-playground

Linux Process Injection Playground Una raccolta completa di tecniche di process injection per Linux, che dimostra vari metodi per iniettare codice in processi in esecuzione. Questi esempi sono pensati per scopi educativi, ricerca sulla sicurezza e comprensione della manipolazione dei processi Lin...

EUVD-2008-3842

Malware in sbrugna...

EUVD-2022-1621

Malicious code in bioql PyPI...

EUVD-2022-1821

Malicious code in bioql PyPI...

EUVD-2022-32150

Malicious code in bioql PyPI...

The Definitive Guide to Linux Process Injection

...

GO-2022-0390 Moby (Docker Engine) started with non-empty inheritable Linux process capabilities in github.com/docker/docker

Moby Docker Engine started with non-empty inheritable Linux process capabilities in github.com/docker/docker...

containerd started with non-empty inheritable Linux process capabilities

Impact A bug was found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2...

GHSA-C9CP-9C75-9V8C containerd started with non-empty inheritable Linux process capabilities

Impact A bug was found in containerd where containers were incorrectly started with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve2...

Amazon Linux 2 : containerd (ALASECS-2023-023)

The version of containerd installed on the remote host is prior to 1.4.13-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2ECS-2023-023 advisory. A flaw was found in Moby Docker Engine, where containers were started incorrectly with non-empty inheritable Linux process...

Rocky Linux 8 : container-tools:3.0 (RLSA-2022:1565)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:1565 advisory. - A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby Docker...

Debian: Security Advisory (DLA-3369-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: buildah (CVE-2022-27651)

The version of buildah installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-27651 advisory. - A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A...

SUSE SLES15 Security Update : podman (SUSE-SU-2023:0326-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0326-1 advisory. podman was updated to version 4.3.1: 4.3.1: Bugfixes - Fixed a deadlock between the podman ps and podman container inspect commands...

Amazon Linux 2022 : docker (ALAS2022-2022-237)

The version of docker installed on the remote host is prior to 20.10.17-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-237 advisory. - Moby is an open-source project created by Docker to enable and accelerate software containerization. A bug was found in Moby...

SUSE-SU-2022:3480-1 Security update for buildah

This update for buildah fixes the following issues: - Updated to version 1.26.0: - CVE-2022-27651: Fixed an issue where containers were incorrectly started with non-empty inheritable Linux process capabilities bsc1197870. - CVE-2021-20206: Fixed an issue in libcni that could allow an attacker to...

Amazon Linux 2022 : containerd, containerd-stress, docker (ALAS2022-2022-054)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-054 advisory. A flaw was found in Moby Docker Engine, where containers were started incorrectly with non-empty inheritable Linux process capabilities. This flaw allows an attacker with access to programs with...