Mitigate-CVE-2023-46747

Ansible Playbook to Mitigate CVE-2023-46747 K000137353: BIG-IP Configuration utility unauthenticated remote code execution vulnerability CVE-2023-46747 Here is the link https://my.f5.com/manage/s/article/K000137353 How to use it 1. Git clone my repo...

CVE-2015-0235-test

CVE-2015-0235-test Ansible playbook to check vulnerability for CVE-2015-0235. This is based on the test program provided by the University of Chigago link. Ansible will allow you to specify a large number of host machines to test at once. This does not patch or restart anything , it only reports ...

Simple-Ansible-for-CVE-2023-20198

Simple-Ansible-for-CVE-2023-20198 This is a very simple playbook to detect and disable http/https server to prevent the vulnerability. Getting started Simply use the Cisco Always on Sandbox to test example 1. Log into sandbox router and turn on http/https server ssh [email protected]...

ansible-mitigate-copyfail-dirtyfrag

Ansible playbook to mitigate CopyFail, DirtyFrag and Fragnesia vulnerabilities Mitigate CopyFail CVE-2026-31431, DirtyFrag CVE-2026-43284 and Fragnesia CVE-2026-46300 vulnerabilities in the Linux Kernel using a simple but effective Ansible playbook. Use this Ansible Playbook to run against your...

ansible-cve-2023-36845

ansible-cve-2023-36845 Simple and untested Ansible Playbook for discovring potential CVE-2023-36845. ansible-playbook -i inventory cve-2023-36845.yml Use the ansible.cfg to limit the output from displaying skipped hosts...

ansible-mysql-cve-2016-6662

ansible-mysql-cve-2016-6662 Simple ansible playbook to patch mysql servers against CVE-2016-6662. UPDATE 20160915.2347.CEST: Kenny informed me of Patrick Forsberg's catch that the original patch did not safeguard against ../ abuse. I've now replaced the patch with one that is more stringent based...

CVE-2024-6387-Mitigation-Ansible-Playbook

CVE-2024-6387 Mitigation Ansible Playbook An Ansible Playbook to mitigate the risk of the regreSSHion RCE CVE-2024-6387 vulnerability until platforms update OpenSSH to a non-vulnerable version. The mitigation applied here is based on the Mitigation Advice provided by Red Hat. As noted there: Noti...

ansible_CVE-2016-5195_check

Description Playbook for testing the dirty cow vulnerability CVE-2016-5195. Dependencies local user on the system with sudo priveleges Run ansible-playbook -i host, check.yml -u jondoe -k -K Links http://dirtycow.ninja...

centos-dirty-cow-ansible

Ansible CVE-2016-5195 mitigation playbook Ansible playbook to mitigate CVE-2016-5195 on CentOS/Scientific Linux with SystemTap. Automating this mitigation recipe found on Red Hat Bugzilla: https://bugzilla.redhat.com/showbug.cgi?id=1384344c13 This playbook install Kernel debuginfo packages and...

ansible-CVE-2024-3094

ansible-CVE-2024-3094 Ansible playbooks designed to check and remediate CVE-2024-3094 XZ Backdoor. These were developed with guidance from https://jfrog.com/blog/xz-backdoor-attack-cve-2024-3094-all-you-need-to-know/. Background Running the checks to see if your Linux system is vulnerable is simp...

jackit

JackIt Do you like JackIt but don't want to carry around a laptop? Checkthis out. What This is a partial implementation of Bastille's MouseJack exploit. See mousejack.com for more details. Full credit goes to Bastille's team for discovering this issue and writing the libraries to work with the...

cdt-samba-deploy

cdt-samba-deploy CDT Ansible playbook for deploying CVE-2017-7494 aka "SambaCry" to an Ubuntu box...

log4j-cve-2021-44228

Log4j-CVE-2021-44228 scanner playbook Very simple Ansible playbook that scan the filesystem for JAR files vulnerable to Log4Shell CVE-2021-44228. The result is saved in a CSV file in the local system. How to run A value for the name of the CSV file must be passed via the localfile variable...

cve-2021-44228

This Ansible playbook applies a global 'JAVATOOLOPTIONS: -Dlog4j2.formatMsgNoLookups=true' to all users. This mitigates the CVE-2021-44228 exploit for all JVM apps on the hosts in the inventory To exec: ansible-playbook playbook.yml -i inventory...

check_struts

checkstruts This project has been created following 2017 Equifax exploit The checkstruts.sh script aims at retrieving any Apache struts libraries version and location found and/or loaded on the system. It can be run directly on a server, or with the provided Ansible playbook, to handle several...

patch-openssl-CVE-2014-0160

patch-openssl-CVE-2014-0160 Patch openssl heartbleed with ansible Usage : pip install ansible ansible-playbook -i yourinventoryfile patch-openssl-CVE-2014-0160.yml yourinventoryfile just need to contain your server list : 192.168.0.10 webserver1.example.com webserver2.example.com db1.example.com...

flyphish

Flyphish Flyphish is an Ansible playbook allowing cyber security consultants to deploy a phishing server in the cloud for security assessments. The playbook installs and configures Gophish , Postfix and OpenDKIM on a virtual machine in the cloud. Additionally, for OPSEC purposes, the playbook...

ansible-playbook-cve-2024-3094

This repository does not have a README...

copy-fail-CVE-2026-31431-mitigation-ansible-playbook

CVE-2026-31431 Mitigation Playbook An Ansible playbook to apply and rollback the CVE-2026-31431 AFALG kernel module mitigation on both Debian/Ubuntu and RHEL/Rocky/AlmaLinux systems. Overview This playbook mitigates CVE-2026-31431 by disabling the vulnerable algifaead kernel module: Debian/Ubuntu...

mysqld_safe-CVE-2016-6662-patch

MySQL server CVE-2016-6662 patch playbook How it works It adds the Percona fix to the mysqldsafe file. Which operating systems are supported CentOS FreeBSD How to use it ansible-playbook mysqld-safe-patch.yml...