pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each entry to path to...

CVE-2021-33909

Sequoia CVE-2021-33909 Building gcc exploit.c -o exploit Running chmod +x exploit ./exploit One-Liner gcc exploit.c -o exploit;chmod +x exploit;./exploit Credits...

pwnkit

CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation $ make or $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing $ make test or $ ./pwnkit.so...

CVE-2021-4034

CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec YouTube video Watch the ✨ YouTube Video Run locally make all && ./pwnkit && make clean Run in docker Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit bash make all && ./pwnkit && make clean Detect using...

CVE-2021-3156-PoC

CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich Contributing Send sensible PR's, I might merge. Some ideas: More targets Target...

ghost-checker

ghost-checker Test wether you're exposed to ghost CVE-2015-0235. All kudos go to Qualys Security Usage /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost Credits Qualys Security Team...

CVE-2021-3156

Project Title Exploit generator for CVE-2021-3156 sudo Installation 1. Install dependencies ./install.sh 2. Run exploit generator: ./run.sh 3. If the system's sudo version is vulnerable, an exploit is generated for the installed version 4. The exploit is generated in exploit.c and the binary...

pwnkit

CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation $ make or $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing $ make test or $ ./pwnkit.so...

CVE-2021-4034

CVE-2021-4034 Proof of Concept Qualys researches found a pretty cool local privilege escalation vulnerability in Polkit's pkexec: writeup, tweet. This vuln has been around and exploitable on major Linux distros for quite a long time. Security patches have been published, so I decided to write a...

CVE-2021-4034

Information Exploit Title: Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Date: 01/25/2022 Exploit Author: Qualys Research Team Tested on: ubuntu 20.04.1 LTS CVE ID: CVE-2021-27928 How to Exploit Test Environment： Step 1：build the expFrom https://github.com/berdav/CVE-2021-4034 make...

CVE-2021-4034

CVE-2021-4034 Exploit for the pwnkit vulnerability from the Qualys team. This exploit assumes that gcc is present on the target machine. $ id uid=1001ayrx gid=1002ayrx groups=1002ayrx,27sudo $ ./setup.sh Run the following command in one bash session: while :; do mv "GCONVPATH=./value"...

CVE-2023-38408

Reference / info https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...

cve-2018-14634

cve-2018-14634 This is a exploit published for researchers discovered by cloud-based security and compliance solution provider Qualys Affect kernel versions 2.6.x, 3.10.x and 4.14.x To successfully exploit this vulnerability, attackers need to have access to the targeted system and run their...

CVE-2022-2586-LPE

CVE-2022-2586-LPE LPE N-day Exploit for CVE-2022-2586: Linux kernel nftobject UAF gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread Author: Alejandro Guerrero [email protected] Copyright C 2022 Qualys, Inc...