CVE-2021-4034

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

Nix-Auditor

Nix Auditor CIS Audit made easier RHEL, CentOS Usage: 1. Make it executable ...eg chmod +x filename 2. Execute it. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Change Log - Credits to Metale Added color variables BLUE, RED, NC NO COLOR and GRE...

CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

CVE-2022-44877-white-box

Docs Paper : https://docs.google.com/document/d/1rQ7e9i2AFzHbASfRu3nkgjIswbrS2AB2i7V9OK3dJLs/edit?usp=sharing Libprochider : https://github.com/gianlucaborello/libprocesshider /var/www/html YouTube Demo : https://www.youtube.com/watch?v=V0HgzE8IElA&t=343s tested machine box CentOS 7 - CentOS Web...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser...

bluewall

BLUEWALL Bluewall 是一个为进攻型和防御型网络专业人士设计的防火墙框架。 该框架允许网络安全专业人员快速搭建其环境，同时保持在授权范围内。 致谢 灵感来源于 Andrew Benson 的 hostfw iptable 生成脚本。 功能特点 Bluewall root@kitploit: 配置防火墙 配置主机名 配置网络接口 支持的操作系统 root@kitploit: Redhat/CentOS 可生成 Windows 配置，但不执行。 命令行 root@kitploit: bluewall -c config/example.ini 参阅示例配置 工具...

CentOS 9 : vim-8.2.2637-41.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-41.el9 build changelog. - out-of-bounds read in updatesnapshot CVE-2026-52859 - buffer overflow in terminal emulator CVE-2026-28420 - stack out-of-bounds write in...

CentOS 9 : kernel-5.14.0-749.el9

The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-749.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: validate stamask before ffs in BA session...

iconvfix

iconvfix 用于修补 CVE-2024-2961 的 Bash 脚本 目前适用于 Centos7. 无保修, 请勿在生产系统上使用, 这只是一个内部辅助工具 : 用法 tsh ssh username@target sudo 'bash -s' iconvfix.sh...

CVE-2009-2698

CVE-2009-2698 CVE-2009-2698 compiled for CentOS 4.8 https://github.com/SecWiki/linux-kernel-exploits/tree/4dca098e7491efc83903494d7c00f24c843aae99/2009/CVE-2009-2698 Detail root@kitploit: hacker@localhost $ id uid=500hacker gid=500hacker groups=500hacker context=useru:systemr:unconfinedt...

CVE-2015-7547

CVE-2015-7547 https://github.com/fjserna/CVE-2015-7547 So I tried to see if many things crash on CentOS6. root@kitploit: ./CVE-2015-7547-poc.py & vi /etc/resolve.conf --------------------------------------------------------------- options single-request-reopen nameserver 8.8.8.8 nameserver...

cve-2017-7494

CVE-2017-7494 Target Machine: centos-6.5 + samba-4.5.9...

CVE-2021-3156

exploit.py Forked from @worawit, shorter&optimized. Only works for sudo=1.8.23 on Centos7 Works on both the web server and linux machines backdoor.php php backdoor generated through weevely, password: "H@rmWsH4rE!". Gives access to an ssh session as Apache if sucessfully uploaded to the server...

CVE-2025-48703

CVE-2025-48703 CVE-2025-48703 is a critical vulnerability in CentOS Web Panel CWP that allows unauthenticated attackers to perform remote code execution RCE by bypassing authentication and executing system commands. The vulnerability affects CWP versions 0.9.8.1204 and earlier, and has been patch...

cfengine-CVE-2016-2118

+Title: CVE-2016-2118 Inventory and Remediation +SETUPFILE: /src/org-html-themes/setup/theme-readtheorg.setup file:./media/badlock.png This policy detects hosts vulnerable to https://vulners.com/cve/CVE-2016-2118CVE-2016-2118 commonly known as http://badlock.orgBadlock by checking if a known...

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

cve-2010-3847

CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: root@kitploit: include include include void attributeconstructor init setuid0;...

cookbook-update-glibc

cookbook-update-glibc Overview cookbook for update glibc. CVE-2015-0235GHOST Japan http://www.walbrix.com/jp/blog/2015-01-ghost.html English http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Description update glibc by Chef Solo. Attention. this cookbook need to reboot. Platform is...

polkit-0.96-CVE-2021-4034

polkit-0.96-CVE-2021-4034 centos 7.x 已经有了 修复CVE-2021-4034 漏洞的RPM包，但没找到 centos 6.x的 自己参考 源代码 制作、打包 rpm redhat 已经修复 6.x，但没找到下载的地方 https://access.redhat.com/errata/RHSA-2022:0269 修复漏洞 root@kitploit: 下载 polkit-0.96-11.1.el6.x8664.rpm 升级 rpm -Uhv polkit-0.96-11.1.el6.x8664.rpm 测试漏洞是否修复 sh...