408 matches found
linux-server-pentest-lab
🔐 Linux Black-Box-Style Penetration Test — Full Attack Chain...
pentest-ubuntu-privilege-escalation
Authorized Penetration Test — Ubuntu Server Overview Autho...
GHSA-JJ7C-H3WM-VJFW vulnerabilities
Vulnerabilities for packages: busybox...
GHSA-JCQV-RJ94-JMX3 vulnerabilities
Vulnerabilities for packages: busybox...
GHSA-FJ27-X67R-V4G5 vulnerabilities
Vulnerabilities for packages: busybox...
IPFire Shellshock
Exploits shellshock vulnerability in IPFire = 2.15 Core Update 82. If the target is vulnerable it is possible to execute commands on operating system level. !/usr/bin/env python3 -- coding: utf-8 -- """IPFire Shellshock""" from kittysploit import from lib.protocols.http.httpclient import Httpclie...
Bash Shellshock - HTTP CGI Detection (CVE-2014-6271)
Detects Shellshock by injecting :;; id into User-Agent/Referer/Cookie against common CGI paths and matching uid=/gid=. !/usr/bin/env python3 -- coding: utf-8 -- """GNU Bash Shellshock HTTP CGI RCE CVE-2014-6271 / CVE-2014-6278.""" import re from kittysploit import from lib.protocols.http.httpclie...
Bash Shellshock - HTTP CGI RCE (CVE-2014-6271)
Exploits Shellshock via User-Agent injection against a CGI path. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Bash Shellshock HTTP CGI RCE CVE-2014-6271 — opens execute session.""" import re from kittysploit import from lib.protocols.http.httpclient import...
Sonicwall SSLVPN - Remote Code Execution (ShellShock) Detection
Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execute arbitrary commands. !/usr/bin/env python3 -- coding: utf-8 -- """Sonicwall SSLVPN contains a 'ShellShock' vulnerability which allows remote unauthenticated attackers to execut.""" impor...
Exploit for OS Command Injection in Gnu Bash
CVE-2014-6271 - Shellshock PoC Summary CVSS 10.0. Bash imp...
Exploit for OS Command Injection in Gnu Bash
Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bu...
ShellShock - Remote Code Execution
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the modcgi and modcg...
Exploit for OS Command Injection in Gnu Bash
HackTheBox: Shocker Writeup A structured and professional walk...
network-vulnerability-assessment-lab
Network Attack and Defence Technology Lab Project Overview...
Penetration-Testing-Exploitation-of-Vulnerable-Linux-Systems
Penetration-Testing-Exploitation-of-Vulnerable-Linux-Systems K...
Exploit for OS Command Injection in Gnu Bash
CVE-201...
Exploit for OS Command Injection in Gnu Bash
...
MiracleLinux 4 : bash-4.1.2-15.AXS4.2 (AXSA:2014-554:02)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-554:02 advisory. Description : The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporat...
MiracleLinux 3 : bash-3.2-33.AXS3.4 (AXSA:2014-553:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-553:01 advisory. Description : The GNU Bourne Again shell Bash is a shell or command language interpreter that is compatible with the Bourne shell sh. Bash incorporat...