67223 matches found
CVE-2017-16995
Okay, here's an example README.md that matches the repository in the image: root@kitploit: CVE-2017-16995 This repository contains 2 exploit programs in C from ExploitDB for privilege escalation on Ubuntu 16.04 by exploiting the CVE-2017-16995 vulnerability. 📂 File List - 44298.c - 45010.c Both a...
deploy-goad
Deploy GOAD v2 on Ubuntu Linux 22.04 This script streamlines the prerequisites needed when deploying the Active Directory lab provided by https://github.com/Orange-Cyberdefense/GOAD High level description Ensure computer has VTx extensions enabled in BIOS Install Ubuntu Server 22.04 Configure...
ubuntu-privesc-lab
ubuntu-privesc-lab Flujo de trabajo completo de pruebas de penetración: fuerza bruta de credenciales, acceso SSH y escalada de privilegios CVE-2021-4034 VISIÓN GENERAL Este proyecto demuestra un flujo de trabajo completo de pruebas de penetración contra una máquina virtual Ubuntu vulnerable. La...
CVE-2016-9079
CVE-2016-9079 A demo exploit of CVE-2016-9079 on Ubuntu x64...
linux_screenshot_xwindows
Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...
CVE-2022-0995
CVE-2022-0995 Exploit para CVE-2022-0995. Utiliza escritura fuera de los límites del heap en el componente watchqueue del kernel de Linux. Técnica similar descrita en esta investigación https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. Exploit probado en Ubuntu...
CVE-2020-9484
CVE-2020-9484 Reference Authored by redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + I just analyzed 1-day exploit. then remodeled. Description Compared to the before PoC, it has the following advantages. + Environment Script for Ubuntu 18.04. + You can ed...
CVE-2019-18634
CVE-2019-18634 N-Day Exploit Slides https://docs.google.com/presentation/d/11DpUy9LlHeuPRSgzaTARHPwlq01vyyqbnJURlG9Ss/edit?usp=sharing Requirements Ubuntu 20.04 sudo 1.8.25 see below for how to build it manually Python3 pwntools Enable pwfeedback root@kitploit: sudo visudo Change this line...
CVE-2017-16995
The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...
Androl4b
Androl4b AndroL4b is an android security virtual machine based on ubuntu-mate includes the collection of latest framework, tutorials and labs from different security geeks and researchers for reverse engineering and malware analysis. What's new in Androl4b v.3? Tools are updated New tools and lab...
dive
dive A tool for exploring a Docker image, layer contents, and discovering ways to shrink the size of your Docker/OCI image. To analyze a Docker image simply run dive with an image tag/id/digest: root@kitploit: dive or you can dive with Docker directly: root@kitploit: alias dive="docker run -ti --...
scannerl
Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...
CVE-2019-10149
CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf 创建 exim 用户和组 sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim 安装依赖 sudo apt-get update sudo apt-get install -y make build-essential libpcre3-dev libdb-dev libxt-de...
CVE-2021-3493
CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...
mailinabox
Mail-in-a-Box Por @JoshData y contribuidores. Mail-in-a-Box ayuda a las personas a recuperar el control de su correo electrónico definiendo un servidor SMTP+todo lo demás fácil de implementar con un solo clic: un servidor de correo en una caja. Por favor, consultahttps://mailinabox.email para ver...
salt-shellshock
shellshock actualización de bash Esta receta intenta actualizar bash desde el paquete del SO, y recurre a compilar bash en sistemas sin actualización disponible. Funciona para nosotros en ubuntu/debian antiguos. Script de instalación de bash desde:...
RootQuest-CTF-Box-Multi-Stage-Exploitation-VM
RootQuest CTF Box — Multi-Stage Exploitation VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...
CVE-2021-3156-plus
CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...
CVE-2023-1829
CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions root@kitploit: sudo apt install libnftnl-dev libmnl-dev Building step: root@kitploit: make References...