mofos

mofos 概念 安装 配置宿主机 QEMU/KVM 系统会话 安全注意事项 Mofos 配置 安装模板 配置防火墙 安装 导入 创建空的上层磁盘 创建虚拟机 自定义 模板 - 安装钩子 虚拟机 - 新建钩子 虚拟机 - 启动钩子 功能特性 设置启动或停止虚拟机时的通知 剪贴板 设置机器间的路由 设置通过渗透测试主机的隧道 USB 管理 PCI 设备管理 共享文件夹 Windows 虚拟机 自动补全 IP 地址重叠 mofos Mofos 是一款用于创建、运行和管理虚拟机的工具。它基于 Libvirt/QEMU/KVM 和 Python，因此兼容任何 Linux 发行版。Mofos 深受...

kali-vm

Kali-VM 构建脚本 Kali Linux 虚拟机（VM）镜像构建器，通过debos（配合 fakemachine 和 KVM）实现。 这些正是 Kali 团队 用于生成官方 Kali Linux VM 镜像的相同 构建脚本，可在 kali.org/get-kali/ 找到。 如需更多信息，请参阅：kali.org/docs/virtualization/。 立即构建你的 Kali！ 先决条件 我们建议在与目标架构匹配的 Linux 主机上进行构建。 有多种方式可以准备好使用 kali-vm 构建脚本。你可以选择： build.sh - 直接从你的机器构建...

kali-packer

Kali-Packer 这里曾是 Kali-Vagrant 构建脚本的所在地。 自 Kali 2025.2 起，Kali 团队已停止使用 Packer 生成 Vagrant 虚拟机，转而使用 DebOS。 这与用于生成我们的其他/标准虚拟机的方法相同。 由于本仓库不再负责Kali Vagrant 镜像，因此已更名为 Kali-Packer。 本仓库已不再用于生产环境，因此可能不是最新或准确的。 延伸阅读 ： README.md：README.packer.md README.md：README.vagrant.md kali.org/docs/：自定义 Kali Vagrant...

specterops-k8s-red-teamers-libvirt-patch

SpecterOps Kubernetes for Red Teamers Libvirt 补丁 这是针对免费的 SpecterOps Kubernetes for Red Teamers 课程的非官方 libvirt 和 QEMU/KVM 补丁。原始网络地址、Kubernetes 拓扑、Mythic 回连和实验环境行为均保持不变。 为什么？ 因为在 Linux 上运行 VirtualBox 就像给已经接入电网的房子带一台便携式发电机；你为内核已经提供的东西付了两次钱，同时还增加了另一个虚拟机监控程序和内核模块攻击面。KVM 是 Linux 的一部分，而 QEMU 和 libvirt...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc (crlsa-2021_1064)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20211064 advisory. QEMU: Regression of CVE-2020-10756 fix in virt:Rocky Linux/qemu-kvm in Rocky Linux 8.3 CVE-2021-20295 Tenable has extracted the preceding description block directly...

Rocky Linux 10.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_58571)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202658571 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Bug Fixes and Enhancements: qemu-kvm hung during drain after double pause...

Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_1486)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261486 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2023-5088, CVE-2026-48914, CVE-2025-11234,...

Rocky Linux 8.6 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0836)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260836 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 8.6. It addresses 6 CVEs: CVE-2021-3507, CVE-2022-0897, CVE-2022-2211,...

Rocky Linux 10.1 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_1831)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20261831 advisory. qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234 Tenable has extracted the preceding description block directly from the CIQ security advisory. No...

Rocky Linux 9 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_39311)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202639311 advisory. qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling CVE-2026-48914 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9.6 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_1484)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261484 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.6. It addresses 8 CVEs: CVE-2026-48914, CVE-2025-11234, CVE-2026-16524,...

Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0489)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260489 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7409, CVE-2023-2680. Tenable h...

CentOS Linux 7.9 [CIQ] Security Update: qemu-img / qemu-kvm / qemu-kvm-common / qemu-kvm-debuginfo / etc (ciqsa-2026_0734)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260734 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2021-3682. Tenable has extracted the preceding...

Rocky Linux 9 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc (crlsa-2026_18772)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202618772 advisory. qemu-kvm: VNC WebSocket handshake use-after-free CVE-2025-11234 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

AlmaLinux 9.2 [TuxCare] Security Update: qemu-guest-agent / qemu-img / qemu-kvm / qemu-kvm-audio-pa / etc (ALMALINUX9.2:CLSA-2025:1760021660)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760021660 advisory. - This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise...

CVE-2026-93834 Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

CVE-2026-93834 Qemu-kvm: 9pfs: use-after-free race in tlcreate/twalk allows vm guest escape

A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal...

CVE-2026-93834

A use-after-free vulnerability exists in the QEMU 9pfs subsystem due to a race condition between the main thread and a worker thread. When processing concurrent Tlcreate and Twalk requests, a malicious guest user can craft a fid path containing stale heap data . This allows the attacker to bypass...

Oracle Linux 9 : qemu-kvm (ELSA-2026-500245)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500245 advisory. - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds...

qemu-kvm security update

7.2.0-43.el9 - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds load in searchchunk CVE-2026-65929 Stefan Hajnoczi Orabug: 39849747 CVE-2026-65929 - virtio: avoid packed vring virtioqueueempty...