CVE-2014-3566-poodle-cookbook

CVE-2014-3566-poodle 如果您的服务器容易受到 CVE-2014-3566 漏洞的攻击，本 cookbook 将使您的 chef 运行失败。 虽然本 cookbook 可用于监控失败的 chef 运行，但它也是一个概念验证。 支持的平台 Ubuntu 12.04 Centos-6.4 属性...

bash-cve-2014-7169-cookbook

bash-cve-2014-7169-cookbook Asegura que la vulnerabilidad 'shellshock' de bash esté parcheada. Basado en la publicación de blog escrita por Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...

cookbook-bash-CVE-2014-6271

bash-CVE-2014-6271 Cookbook 此 Chef cookbook 包含一个默认 recipe，如果发现 bash 且该 bash 存在 CVE-2014-6271 中描述的远程利用漏洞，它将使你的 Chef 运行失败。查找 bash 的位置可在 node'bash-CVE-2014-6271''bashes' 属性中配置（见下文）。 系统要求 应适用于任何 UNIX/Linux。如有问题请报告（最好附上补丁）。 属性 node'bash-CVE-2014-6271''bashes' - 一个必需的数组，包含待检测漏洞的可能 bash 可执行文件。默认为...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

bash-shellshock

bash-shellshock Cookbook 本 Cookbook 旨在测试并可选择性地修复 bash 的 “Shellshock” 漏洞，其正式名称为 cve-2014-7169。 一旦 Chef-client 在一个或多个主机上执行了此 Recipe，即可通过 knife search: 从 Chef 服务器检索所有存在 “Shellshock” 利用漏洞的节点列表： knife search node 'bash:shellshockvulnerable' 限制 本 Cookbook 依赖于操作系统原生的包管理系统来提供已修补版本的 bash 包。 要求 平台 已在 CentO...

regreSSHion

regreSSHion 用于检查 regreSSHion 漏洞 CVE-2024-6387 的 Chef Inspec 配置文件 请根据您自己的需求修改此文件。此处仅作为示例提供。...

CVE-2015-0235-cookbook

CVE-2015-0235-cookbook 本 cookbook 用于测试你是否受到 CVE-2015-0235 漏洞的影响。 当前行为在测试失败时会报错： root@kitploit: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end 基于 Debian 的系统： CVE-2015-0235 基于 RHEL 的系统： CVE-2015-0235 支持平台 Debian / Ubuntu CentOS /...

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

mose

MOSE Master Of SErvers...

chef_tissues

Tissues 安装针对 CVE-2017-0145（又名 WannaCry）的补丁。 更多信息：https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt 用法： root@kitploit: "name":"mynode", "runlist": "recipetissues"...

EUVD-2026-37955

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

EUVD-2026-37956

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

CVE-2026-8668

CVE-2026-8668 concerns Chef 360 prior to v1.7.0, where a static credential embedded in the product allowed unauthenticated access to internal message queues containing tenant-specific identifiers. The underlying issue is a hardcoded credential that enables access without authentication; later ver...

CVE-2026-8668 Hardcoded credentials in embedded content

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8668

A static credential embedded in Chef 360 prior to v1.7.0 permitted unauthenticated access to internal message queues. Queue messages contained tenant-specific identifiers. The credential has been rotated and replaced with per-tenant access in subsequent versions, eliminating this access method...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

CVE-2026-8100

Impact A security issue has been identified in Chef 360 that could allow unauthorized access to protected API endpoints under specific conditions. This issue is due to improper handling of URL-encoded paths during request processing. In certain scenarios, an authenticated request may bypass...

CVE-2026-8100

CVE-2026-8100 affects Chef 360. The issue arises from improper handling of URL-encoded paths during request processing, allowing an authenticated request to bypass standard access controls and access higher-privilege API endpoints under certain conditions. Impact is deployment/configuration depen...