CVE-2018-4416-exploit

Предисловие :PROPERTIES: :CUSTOMID: preface :END: Итак, безопасность бинарного кода — это не только /heap/ и /stack/, нам еще многое предстоит открыть, несмотря на обычные CTF-задачи. Браузер, виртуальная машина и ядро играют важную роль в безопасности бинарного кода. И я решил сначала изучить...

cgPwn

cgPwn - Boîte Cyber Grand Pwnage Ceci est une VM Ubuntu conçue pour le hardware hacking, la rétro-ingénierie et le wargaming. Outils inclus Pwndbg Pwntools Binwalk Radare2 Moteurs Capstone, Unicorn et Keystone Qira Timeless Debugger AFL Valgrind , VGdb ROPGadget, XRop, Ropper, rp++ Intel PIN Angr...

Penetration-Test

Тест на проникновение Полный отчет о тесте на проникновение против IP Ubuntu VM. Цепочка атак: перебор каталогов → обнаружение резервных файлов → взлом паролей → загрузка файлов в CMS → обратная оболочка → повышение привилегий ядра Dirty Pipe, CVE-2022-0847. Структура репозитория /report – Итогов...

ubuntu-privesc-lab

ubuntu-privesc-lab 전체 침투 테스트 워크플로: 자격 증명 무차별 대입, SSH 접근 및 권한 상승 CVE-2021-4034 개요 이 프로젝트는 취약한 Ubuntu 가상 머신을 대상으로 한 전체 침투 테스트 워크플로를 보여줍니다. 공격 체인에는 정찰, 자격 증명 무차별 대입, 초기 접근 및 여러 기법을 사용한 권한 상승이 포함됩니다. 사용된 도구 Nmap Hydra SSH Git CVE-2021-4034 PwnKit 정찰 정찰은 Nmap을 사용하여 수행되었으며, 특정 네트워크 wifi 에서 열린 호스트 수를...

Ubuntu 18.04.2 VMs can fail to boot on Citrix Hypervisor (formerly XenServer)

When creating an Ubuntu 18.04.2 or18.04.3VM or updating an existing VM to Ubuntu 18.04.2 or 18.04.3, your VM can fail to boot. The console shows the boot sequence hung at the point "Starting Tool to automatically collect and submit kernel crash signatures..." If you switch the console to shell mo...

Linux - Broken uid/gid Mapping for Nested User Namespaces

commit 6397fac4915a "userns: bump idmap limits to 340" increases the number of possible uid/gid mappings that a namespace can have from 5 to 340. This is implemented by switching to a different data structure if the number of mappings exceeds 5: Instead of linear search over an unsorted array of...

CVE-2008-5103

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

CVE-2008-5103

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

CVE-2008-5103: Undefined Security Weakness

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...