mose

MOSE Master Of SErvers Copyright 2020 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract DE-NA0003525 with NTESS, the U.S. Government retains certain rights in this software MOSE is a post-exploitation tool that helps security professionals leverage...

cookbook-bash-CVE-2014-6271

bash-CVE-2014-6271 Cookbook This Chef cookbook contains a default recipe that will fail your Chef run if a bash is found and that bash is vulnerable to the remote exploit described in CVE-2014-6271. The places to look for bash can be configured in the node'bash-CVE-2014-6271''bashes' attribute se...

CVE-2015-0235-cookbook

CVE-2015-0235-cookbook This cookbook will test if you are vulnerable to CVE-2015-0235. Current behavior will error out when test fails: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end For debian based systems: CVE-2015-0235 For...

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

chef-os-hardening

os-hardening Chef cookbook 1 2 説明 このcookbookは、数多くのセキュリティ関連設定を提供し、全体的な基本保護を実現します。 以下の設定を行います: パッケージ管理の設定（例: 署名済みパッケージのみを許可） 既知の問題があるパッケージの削除 pam および pamlimits モジュールの設定 Shadow password suite の設定 システムパス権限の設定 ソフトリミットによるコアダンプの無効化 システムコンソールへのrootログインの制限 SUIDの設定 sysctlによるカーネルパラメータの設定 以下のことは行いません:...

chef-ssh-hardening

ssh-hardening Chefクックブック 1 2 3 4 説明 このクックブックは、安全なssh-clientおよびssh-serverの設定を提供します。このクックブックはユーザーやsshキーの管理機能を提供しません。その場合は他のクックブックを使用してください。 要件 Chef = 14.13.11 プラットフォーム Debian 8, 9, 10 Ubuntu 16.04, 18.04 RHEL 6, 7 CentOS 6, 7 Oracle Linux 6, 7 Fedora 29, 30 OpenSuse Leap 42 Amazon Linux 1, 2 属性...

bash-cve-2014-7169-cookbook

bash-cve-2014-7169-cookbook Ensures bash 'shellshock' vulnerability is patched. Based on blog post written by Julian Dunn @ Chef https://www.chef.io/blog/2014/09/30/detecting-repairing-shellshock-with-chef/...

Chef Automate < 4.13.295 — SQL Injection

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in the compliance service via improperly neutralized inputs used in an SQL command using a well-known token. id: CVE-2025-8868 info...

regreSSHion

regreSSHion Chef Inspec profile for checking regreSSHion vulnerability CVE-2024-6387 Please modify this as per your own needs. This is provided as an example...

chef-mysql-hardening

mysql-hardening Chef cookbook 説明 mysql のセキュリティ設定を提供します。攻撃者に対する攻撃面を最小限に抑えた設定で、本番環境に対応した mysql インスタンスをセットアップすることを目的としています。 この cookbook は mysql のセキュリティ設定に焦点を当てており、インストールには mysql cookbook を再利用しています。そのため、Chef で既存の mysql 設定の上にこのハードニング層を追加できます。 この cookbook は os-hardening および ssh-hardening...

bash-shellshock

bash-shellshock Libro de recetas Este libro de recetas está diseñado para probar y opcionalmente remediar el error 'shellshock' de bash, más formalmente conocido como cve-2014-7169. Una vez que Chef-client haya ejecutado esta receta en uno o más hosts, se puede recuperar una lista de todos los...

cookbook-update-glibc

cookbook-update-glibc Resumen cookbook para actualizar glibc. CVE-2015-0235 GHOST Japonés http://www.walbrix.com/jp/blog/2015-01-ghost.html Inglés http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Descripción Actualiza glibc mediante Chef Solo. Atención: este cookbook requiere reinici...

chef_tissues

Tissues Install patch for CVE-2017-0145 AKA WannaCry. More Info: https://www.microsoft.com/security/portal/threat/encyclopedia/Entry.aspx?Name=Ransom:Win32/WannaCrypt Usage: "name":"mynode", "runlist": "recipetissues"...

CVE-2014-3566-poodle-cookbook

CVE-2014-3566-poodle This cookbook will error out your chef run if your server is vulnerable to CVE-2014-3566. Although this cookbook can be used to watch for failed chef runs, it is also a proof of concept. Supported Platforms Ubuntu 12.04 Centos-6.4 Attributes Key | Type | Description | Default...

CVE-2026-80462

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

CVE-2026-80462 Privilege Escalation in Progress Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

EUVD-2026-76099

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

CVE-2026-80462 Privilege Escalation in Progress Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions...

CVE-2026-80462

Progress Chef Automate is affected by a privilege escalation vulnerability in its API gateway and identity validation path , allowing an unauthenticated network actor to gain elevated access to protected functionality under specific conditions. The vulnerability is rated CVSS 3.1 10.0 (Critical) ...

PT-2026-89866

👨‍🍳 Progress Chef Automate: CVSS 10 critical. CVE-2026-80462 lets unauthenticated actors escalate privileges via the API gateway identity validation path under specific conditions. Patch immediately. cybersecurity ciso vulnerabilities mssp https://t.co/oK7C8H5CtZ https://t.co/JFDGm3roK7...