xzk8s

xzk8s Dockerfile و Kubernetes manifests لإعادة إنتاج CVE-2024-3094 بناء الصورة نستخدم إصدار ديبيان من أدوات xz الضعيفة كصورة أساسية. نحتاج أيضًا إلى تصحيح المكتبة. الإصدار المُصحح من مكتبة liblzma مأخوذ من مستودع xzbot. root@kitploit: FROM...

REALITY_SMASHER

REALITYSMASHER vRealize RCE + Privesc CVE-2021-21975, CVE-2021-21983, CVE-0DAY-????? "من السهل إيقافه كما هو سهل فهمه." ما هو؟ "Reality Smasher" هو استغلال Exploit لـ vRealize يستفيد من الثغرات الأمنية التي تمت معالجتها في VMSA-2021-0004 CVE-2021-21975, CVE-2021-21983 بالإضافة إلى ثغرة تصعيد...

IoT-Home-Guard

हार्डवेयर टूल का पहला संस्करण डेवलपमेंट प्लेटफॉर्म के रूप में Raspberry Pi का उपयोग करता है। उपयोगकर्ताओं को ssh के माध्यम से सॉफ्टवेयर टूल लॉन्च करने के लिए Raspberry Pi में लॉग इन करना होता है, और फिर परीक्षण किए जाने वाले IoT डिवाइस को Raspberry Pi के wifi से कनेक्ट करना होता है। मैं एक दूसरा...

ubuntu-privesc-lab

ubuntu-privesc-lab Flusso di lavoro completo di penetration testing: brute force delle credenziali, accesso SSH ed escalation dei privilegi CVE-2021-4034 PANORAMICA Questo progetto dimostra un flusso di lavoro completo di penetration testing contro una macchina virtuale Ubuntu vulnerabile. La...

CVE-2024-22894

CVE-2024-22894 Baixou-se a versão mais recente do firmware da bomba de calor wp2reg-V3.88.0-9015 de https://www.heatpump24.com/DownloadArea.php. Dentro deste firmware existe um ficheiro chamado: wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow Este contém...

vsFTP-2.3.4-Remote-Root-Shell-Exploit

vsFTP 2.3.4 Exploit Remoto per la Shell di Root Un semplice programma Python che ottiene una shell di root remota sul dispositivo di destinazione sfruttando una vulnerabilità CVE-2011-2523 presente in vsFTP 2.3.4 Requisiti Linguaggio utilizzato = Python3 Moduli/Pacchetti utilizzati: socket os...

CVE-2018-14847

CVE-2018-14847 crea un proxy globale basato su RouterOS tramite CVE-2018-14847 Come Usare preparazione root@kitploit: pip3 install paramiko ipcalc optparse hashlib utilizzo per file di IP root@kitploit: python3 loop.py -f list.txt per IP singolo root@kitploit: python3 loop.py ip Copyright la part...

fwbt

fwbt Dokumentation: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof-of-Concept-Code für die Interaktion mit Firewalla über Bluetooth Low-Energy und die Ausnutzung von CVE-2024-40892 / CVE-2024-40893 Ohne jegliche Konfiguration scannt es nach Firewalla-Geräten in lokaler...

CVE-2021-3156

exploit.py Fork da @worawit, più corto e ottimizzato. Funziona solo con sudo=1.8.23 su Centos7 Funziona sia sul server web che su macchine Linux backdoor.php backdoor php generata tramite weevely, password: "H@rmWsH4rE!". Fornisce accesso a una sessione ssh come Apache se caricata con successo su...

jumpserver

Eine Open-Source-PAM-Plattform Bastion-Host English · 中文简体 · 中文繁體 · 日本語 · Português Brasil · Español · Русский · 한국어 Was ist JumpServer? JumpServer ist eine Open-Source-Plattform für privilegierten Zugriff Privileged Access Management, PAM, die DevOps- und IT-Teams über einen Webbrowser...

pentest_teamcity

Pentest TeamCity using Metasploit TL;DR: Obtain passwords fromJetBrains IDE like IntelliJ or PyCharm and use those credentials inside TeamCity Continuous Integration Server in order to get meterpreter session on server and build agents using metasploit by Kacper Szurek. JetBrains Comment This is ...

CVE-2023-34039

CVE-2023-34039 POC para CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight RCE por chave SSH estática Análise Técnica Uma análise de causa raiz da vulnerabilidade pode ser encontrada no meu blog:...

the-bastion

🔒 The Bastion Overview Bastions are a cluster of machines used as the unique entry point by operational teams such as sysadmins, developers, database admins, ... to securely connect to devices servers, virtual machines, cloud instances, network equipment, ..., usually using ssh. The Bastion...

CVE-2023-34039

CVE-2023-34039 POC per CVE-2023-34039 VMWare Aria Operations for Networks vRealize Network Insight RCE tramite chiave SSH statica Analisi Tecnica Un'analisi delle cause profonde della vulnerabilità è disponibile sul mio blog:...

cve-2021-21972

cve-2021-21972 Instruções python3 python poc.py -u target -s webshell/ssh O webshell só suporta a versão vecter6.5, o ssh suporta todas as versões, este POC é apenas para Linux...

CVE-2026-44094

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-44105

The CVE-2026-44105 entry describes that credentials for the local user “user-app” may be exposed in log files, potentially allowing a low-privileged local attacker with log access to authenticate via SSH as user-app. The available metrics indicate LOCAL attack vector, low user interaction, with a...

EUVD-2026-51029

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-44094 Fallback to second RAUC slot with default credentials

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...

CVE-2026-44094

An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure configuration including default credentials. This could allow the attacker to gain SSH access to the system as an unprivileged user "user-app". Charging could be interrupted...