Nix-Auditor

Nix Auditor 让CIS审计更简单（RHEL、CentOS） 用法： 1. 使其可执行...例如 chmod +x 文件名 2. 执行它。 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0： 变更日志 - 感谢 Metale 在第210-213行添加了颜色变量 BLUE, RED, NC（无颜色）和 GREEN。在第1171和1173行将颜色变量应用于函数 funcwrapper 中的“passed”和“failed”结果。 ☕ 支持我...

CVE-2015-7547

CVE-2015-7547 Script de prueba de vulnerabilidad de glibc Este script de shell permite probar la vulnerabilidad de glibc CVE-2015-7547. Está escrito para sistemas basados en rpm como Red Hat Enterprise Linux / RHEL / CentOS 5/6/7. La detección para otras distribuciones puede seguir. Resolución 1...

trivy-action

Trivy Action GitHub Action for Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy wit...

CVE-2026-43499-poc

Investigación de armamento para CVE-2026-43499 ghostlock. el bug de la ruta proxy removewater de rtmutex que deja el piblockedon de una tarea colgando en su propio marco de pila del kernel reventado. La clase de bug y la estrategia de exploit original son crédito de nebusec su write-up aquí todo ...

encrypted-linux-kernel-modules

ELKM: Módulos de kernel cargables cifrados para Linux x86-64 ELKM proporciona un mecanismo para transportar y cargar de forma segura Módulos de Kernel Cargables LKM cifrados. El objetivo es proteger rootkits e implantes basados en kernel contra la observación por parte del software de Detección y...

Bearer - Code Security Scanning Tool (SAST) That Discover, Filter And Prioritize Security Risks And Vulnerabilities Leading To Sensitive Data Exposures (PII, PHI, PD)

Discover, filter, and prioritize security risks and vulnerabilities impacting your code. Bearer is a static application security testing SAST tool that scans your source code and analyzes your data flows to discover, filter and prioritize security risks and vulnerabilities leading to sensitive da...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution

Exploit Title: Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution Date: 2020-07-06 Exploit Author: SpicyItalian Vendor Homepage: https://www.arubanetworks.com/products/security/network-access-control/ Version: ClearPass 6.7.x prior to 6.7.13-HF, ClearPass 6.8.x prior ...

ClearPass Policy Manager Unauthenticated Remote Command Execution Exploit

!/usr/bin/env bash ClearPass Policy Manager Unauthenticated Remote Command Execution in the WebUI CVE-2020-7115 For best results use OpenSSL/libcrypto shipped with RHEL/CentOS 7.x. Questions? Contact email protected. if "$" -ne 4 ; then echo "Usage: basename $0 remote host remote port local host...

openSUSE: Security Advisory for salt (openSUSE-SU-2020:0357-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 30 : unbound (2019-e99b716a92)

Fix build on rhel/centos systems Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

RHEL / CentOS 6.x (64-bit) Malicious Kernel Module Detection (OutlawCountry)

According to diagnostic indicators, the remote Red Hat Enterprise Linux or CentOS host may have a malicious kernel module known as OutlawCountry installed. OutlawCountry creates a hidden netfilter table that allows an authenticated attacker to covertly override existing netfilter/iptables firewal...

Linux Kernel libfutex Local Root for RHEL/CentOS 7.0.1406 Exploit

Exploit for linux platform in category local exploits / CVE-2014-3153 exploit for RHEL/CentOS 7.0.1406 By Kaiqu Chen email protected Based on libfutex and the expoilt for Android by GeoHot. Usage: $gcc exploit.c -o exploit -lpthread $./exploit / include include include include include include...