rita

RITA Real Intelligence Threat Analytics If you get value out of RITA and would like to go a step further with hunting automation, futuristic visualizations, and data enrichment, then take a look at AC-Hunter. Brought to you by Active Countermeasures. Sponsored by BHIS. RITA is an open source...

centos-dirty-cow-ansible

Ansible CVE-2016-5195 缓解 playbook 用于在 CentOS/Scientific Linux 上通过 SystemTap 缓解 CVE-2016-5195 的 Ansible playbook。 自动化 Red Hat Bugzilla 上发现的此缓解方法： https://bugzilla.redhat.com/showbug.cgi?id=1384344c13 此 playbook 会安装内核 debuginfo 软件包和 SystemTap。然后它会生成一个 SystemTap 模块并在后台运行它。如果您重启服务器，则需要重新运行此 playbook...

CVE-2018-19788

CVE-2018-19788 利用CVE-2018-19788 PolicyKit漏洞 在完全修补的CentOS7安装上利用PolicyKit漏洞的步骤。 root@centos7 groupadd -g 4000000000 cve201819788 root@centos7 useradd -m -c "User With High UID" -u 4000000000 -g 4000000000 -s /bin/bash cve201819788 root@centos7 id cve201819788 uid=4000000000cve201819788...

CVE-2021-4034

CVE-2021-4034 PwnKit 的 PoC：polkit 的 pkexec 中的本地权限提升漏洞 CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80 https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034 PoC 已在 Debian 10 和 CentOS 7 上验证...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

Nix-Auditor

Nix Auditor 让CIS审计更简单（RHEL、CentOS） 用法： 1. 使其可执行...例如 chmod +x 文件名 2. 执行它。 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0： 变更日志 - 感谢 Metale 在第210-213行添加了颜色变量 BLUE, RED, NC（无颜色）和 GREEN。在第1171和1173行将颜色变量应用于函数 funcwrapper 中的“passed”和“failed”结果。 ☕ 支持我...

harbian-audit

harbian-audit Hardening Introduction Hardened Debian GNU/Linux and CentOS 8 distro auditing. The main test environment is in debian GNU/Linux 9/10/11/12/13 and CentOS 8 and ubuntu 22, and other versions are not fully tested. There are no implementations of desktop related items in this release. T...

harbian-audit

harbian-audit审计与加固 简介 本项目是面向 Debian GNU/Linux、CentOS 8 和 Ubuntu 发行版的安全审计与加固工具。当前主要测试环境为 Debian GNU/Linux 9/10/11/12/13、CentOS 8 以及 Ubuntu 22，其他版本尚未经过充分测试。本项目主要面向服务器场景，暂未针对桌面环境实现对应检查项。 本项目基于 OVH-debian-cis 框架，并结合 Debian GNU/Linux 9 的一些特性进行了优化。同时参考了安全合规基线 STIG（STIG RedHatEnterpriseLinux7V2R5 及 STIG...

CVE-2009-2692

CVE-2009-2692 Linux 空指针解引用 这只是 https://www.exploit-db.com/exploits/9545/ 上代码的编译二进制文件 为教育目的编译 它在 CentOS 4.8 下编译...

CVE-2022-44877-white-box

文档：https://docs.google.com/document/d/1rQ7e9i2AFzHbASfRu3nkgjIswbrS2AB2i7V9OK3dJLs/edit?usp=sharing Libprochider：https://github.com/gianlucaborello/libprocesshider /var/www/html YouTube 演示：https://www.youtube.com/watch?v=V0HgzE8IElA&t=343s 已测试的机器环境 CentOS 7 - CentOS Web Panel 9.8.1146 Kali Linux...

CVE-2021-4154

CVE-2021-4154 此漏洞已在 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3b0462726e7ef281c35a7a4ae33e93ee2bc9975b 中修复 此漏洞利用程序适用于大多数未打补丁的内核： CentOS 8 内核版本高于 linux-4.18.0-305.el8 Debian 11 内核版本高于 5.10.0-8 Fedora 31/32/33 内核版本高于 5.3.7-301.fc31 Ubuntu 18/20 内核版本高于 5.4.0-84 和...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser...

rehex

Reverse Engineers' Hex Editor A cross-platform Windows, Linux, macOS, BSD hex editor for reverse engineering, and everything else. An online copy of the manual can be accessed here: solemnwarning.net/rehex/manual/. Features Large 1TB+ file support Decoding of integer/floating point value types...

bluewall

BLUEWALL Bluewall is a firewall framework designed for offensive and defensive cyber professionals. This framework allows Cybersecurity professionals to quickly setup their environment while staying within their scope. Credit Inspired by Andrew Benson's hostfw iptable generation script. Features...

bluewall

BLUEWALL Bluewall 是一个为进攻型和防御型网络专业人士设计的防火墙框架。 该框架允许网络安全专业人员快速搭建其环境，同时保持在授权范围内。 致谢 灵感来源于 Andrew Benson 的 hostfw iptable 生成脚本。 功能特点 Bluewall root@kitploit: 配置防火墙 配置主机名 配置网络接口 支持的操作系统 root@kitploit: Redhat/CentOS 可生成 Windows 配置，但不执行。 命令行 root@kitploit: bluewall -c config/example.ini 参阅示例配置 工具...

CVE-2015-7547

CVE-2015-7547 glibc 漏洞测试脚本 该脚本用于测试 glibc 漏洞 CVE-2015-7547。它专为基于 rpm 的系统编写，例如 Red Hat Enterprise Linux / RHEL / CentOS 5/6/7。其他发行版的检测支持可能会在后续添加。 解决方案 1. 运行 bin/test-glibc.sh 检查您的系统是否存在漏洞 2. 更新 glibc 软件包 3. 重启系统或重新启动所有受影响的服务 4. 再次运行 bin/test-glibc.sh 进行验证...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

CVE-2022-44877

Centos Web Panel 7 未经授权的远程代码执行 - CVE-2022-44877 root@kitploit: + Centos Web Panel 7 Unauthenticated Remote Code Execution + Centos Web Panel 7 - log ➜ CVE-2022-44877 cat log examplelog ➜ CVE-2022-44877 echo "examplelog $whoami" log ➜ CVE-2022-44877 cat log examplelog examplelog root ➜...

Centos Web Panel 0.9.8.480 - Local File Inclusion

Centos Web Panel version 0.9.8.480 suffers from local file inclusion vulnerabilities. Other vulnerabilities including cross-site scripting and remote code execution are also known to impact this version. id: CVE-2018-18323 info: name: Centos Web Panel 0.9.8.480 - Local File Inclusion author:...

CentOS Web Panel - OS Command Injection

The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. id: CVE-2021-31324 info: name: CentOS Web Panel - OS Command Injection author: ritikchaddha severity: critical description: | The unprivileged user portal...