SynthAPT

SynthAPT Overview SynthAPT is a playbook-based adversary simulation framework for replicating complex attack paths. It is designed for validating advanced detections and AI-based investigation agents. The core idea is that malware behavior can be expressed in JSON and compiled into functional...

threat-modeling-playbook

Intro We aim to improve product and software security with our new threat modeling playbook. We consider threat modeling as a foundational activity to improve your software assurance. We are convinced that a good threat modeling practice will measurably decrease security issues of delivered...

CVE-2026-31431

CVE-2026-31431 Introduction Run with: root@kitploit: ansible-playbook -v -i environment/production/inventory --timeout=1 playbook.yml Links https://copy.fail https://vulners.com/cve/CVE-2026-31431 https://access.redhat.com/security/cve/cve-2026-31431...

ansible-mitigate-copyfail-dirtyfrag

Playbook de Ansible para mitigar las vulnerabilidades CopyFail, DirtyFrag y Fragnesia Mitigue las vulnerabilidades CopyFail CVE-2026-31431, DirtyFrag CVE-2026-43284 y Fragnesia CVE-2026-46300 en el kernel de Linux utilizando un playbook de Ansible simple pero efectivo. Utilice este Playbook de...

cve-2019-6340-bits

cve-2019-6340-bits Bits generated while analyzing CVE-2019-6340 Drupal RESTful RCE modsec rule pcap example nginx config example logs example playbook...

centos-dirty-cow-ansible

Ansible CVE-2016-5195 mitigation playbook Ansible playbook to mitigate CVE-2016-5195 on CentOS/Scientific Linux with SystemTap. Automating this mitigation recipe found on Red Hat Bugzilla: https://bugzilla.redhat.com/showbug.cgi?id=1384344c13 This playbook install Kernel debuginfo packages and...

raspberrypi-setup

Configuración de Raspberry Pi Este Ansible playbook está diseñado para configurar rápidamente tu Raspberry Pi. Es compatible con todos los modelos. Se ha probado con éxito en múltiples modelos, incluyendo Pi Zero W, Pi Zero 2W y Pi 4B, entre otros. El playbook debería funcionar bien tanto en Debi...

mysqld_safe-CVE-2016-6662-patch

MySQL server CVE-2016-6662 patch playbook How it works It adds the Percona fix to the mysqldsafe file. Which operating systems are supported CentOS FreeBSD How to use it root@kitploit: ansible-playbook mysqld-safe-patch.yml...

secure-agent-playbook

Secure Agent Playbook An open-source security playbook for AI agents. Structured, OWASP-grounded procedures that enable agents to perform security engineering tasks — from code review to AI agent security audits. Table of Contents Why Use This? What This Is Quick Start Skills Catalog Agents Examp...

cve-2021-44228

This Ansible playbook applies a global 'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true' to all users. This mitigates the CVE-2021-44228 exploit for all JVM apps on the hosts in the inventory To exec: root@kitploit: ansible-playbook playbook.yml -i inventory...

CVE-2024-3094-patcher

Ansible Playbook for Patching xz-Utils Vulnerability CVE-2024-3094 This document details an Ansible playbook designed to address the critical vulnerability CVE-2024-3094 identified in xz-Utils versions 5.6.0 and 5.6.1. This vulnerability, classified as a backdoor, grants attackers unauthorized...

CVE-2023-20198-Fix

CVE-2023-20198-Fix This repository contains an Ansible playbook for remediating the CVE-2023-20198 vulnerability found in certain Cisco devices. It does the following: 1. Checks if the web service is running on the router by checking for the associated commands in the running config 2. Disables t...

ansible_CVE-2016-5195_check

Descripción Playbook para probar la vulnerabilidad dirty cow CVE-2016-5195. Dependencias usuario local en el sistema con privilegios sudo Ejecución root@kitploit: ansible-playbook -i host, check.yml -u jondoe -k -K Enlaces http://dirtycow.ninja...

patch-openssl-CVE-2014-0291_CVE-2015-0204

patch-openssl-CVE-2015-0291CVE-2015-0204 Patch openssl with ansible Usage : root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2015-0291CVE-2015-0204 yourinventoryfile just need to contain your server list : root@kitploit: 192.168.0.10 webserver1.example.co...

ansible-CVE-2015-0235-GHOST

This repository does not have a README...

Simple-Ansible-for-CVE-2023-20198

Simple-Ansible-for-CVE-2023-20198 This is a very simple playbook to detect and disable http/https server to prevent the vulnerability. Getting started Simply use the Cisco Always on Sandbox to test example 1. Log into sandbox router and turn on http/https server root@kitploit: ssh...

patch-openssl-CVE-2014-0160

patch-openssl-CVE-2014-0160 Parchea openssl heartbleed con ansible Uso : root@kitploit: pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2014-0160.yml yourinventoryfile solo necesita contener tu lista de servidores : root@kitploit: 192.168.0.10 webserver1.example.com...

CVE-2024-6387-Mitigation-Ansible-Playbook

Playbook de Ansible para Mitigación de CVE-2024-6387 Un playbook de Ansible para mitigar el riesgo de la vulnerabilidad regreSSHion RCE CVE-2024-6387 hasta que las plataformas actualicen OpenSSH a una versión no vulnerable. La mitigación aplicada aquí se basa en el Consejo de Mitigación...

CVE-2015-0235-test

CVE-2015-0235-test Ansible playbook to check vulnerability for CVE-2015-0235. This is based on the test program provided by the University of Chigago link. Ansible will allow you to specify a large number of host machines to test at once. This does not patch or restart anything , it only reports ...

log4j-cve-2021-44228

Playbook del escáner detector de Log4j-CVE-2021-44228 Playbook de Ansible para verificar hosts Linux de destino usando el script detector de Log4j oficial de Red Hat para Log4Shell CVE-2021-44228. Detector de Red Hat versión 1.3, 2022-01-10. El resultado se guarda en un archivo txt dentro de...