HTB-Facts-Writeup

HackTheBox — Writeup de la máquina Facts Información de la máquina Campo| Detalles ---|--- Nombre| Facts SO| Linux Dificultad| Easy Lanzamiento| Season 10 Retirada| No Resumen de la cadena de ataque root@kitploit: Recon → Enumeración Web → CVE-2025-2304 Asignación Masiva → Fuga de Credenciales...

gibson

Gibson Network monitoring tool that maps process-to-network connections, identifies cloud providers, and generates firewall rules. Lightweight agent for collection, server for aggregation, parser for analysis. Screenshots Cross-machine overview — OS version comparison, shared IP detection,...

soc-investigation-lab

End-to-End SOC Investigation Lab Executes a complete four-phase attack chain Reconnaissance → Exploitation → Persistence → Exfiltration against Metasploitable2, collects evidence at each phase, and produces a structured incident timeline and SOC report — demonstrating simultaneous attacker and...

cve-2025-55182

Penetration Testing Writeup: Next.js RCE & Node.js Inspector Privilege Escalation This technical writeup details the exploitation path for compromising a target hosting a vulnerable Next.js web application, achieving initial access via harvested credentials, and leveraging a misconfigured local...

CVE-2026-31431

🚨 CVE-2026-31431: Copy Fail A critical 9-year-old flaw in the Linux kernel that allows obtaining root access in seconds 📋 Executive Summary Attribute| Details ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail Type| Local Privilege Escalation LPE CVSS| 7.8 High Discovered by| Theori Xint Code...

CVE-2023-31290-Scanner-

DONATE: bc1qps62cyk9f9unmdkc9k3ccj9e2h8ywfhg2j53ec Built with ❤️ for the crypto research community. 🚀 CVE-2023-31290 Scanner - Bitcoin & Ethereum Vulnerability Exploit ⚡ The Fastest CVE-2023-31290 Milk Sad Scanner for Bitcoin & Ethereum 🔥 Up to 150,000 seeds/second on modern hardware! 📌 WHAT IS...

cve-2024-21626-runc-1.1.11-escape

CVE-2024-21626 - runc Leaky Vessels Overview Field| Detail ---|--- CVE| CVE-2024-21626 Affected Component| runc ≤ 1.1.11 Vulnerability Class| Container escape via file descriptor leak Nickname| Leaky Vessels Root Cause runc leaks an internal file descriptor typically fd/7 pointing to the host...

flight-risk

flight-risk flight risk /flaɪt rɪsk/ — React's Flight protocol is the serialization layer behind React Server Components. CVE-2025-55182 exploits a deserialization flaw in Flight to achieve pre-auth RCE. If your app uses RSC, it's a flight risk. Security toolkit for CVE-2025-55182 React2Shell — a...

CVE-2025-14847_Expolit

MongoBleed-Pro ☠️ Advanced MongoDB Memory Leak Exploit Tool Keep Learning | Keep Hacking with Alexcyberx 🔥 About MongoBleed-Pro is an advanced exploitation tool for CVE-2025-14847 , a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security...

CVE-2026-31431-Report-Copy-fail-Vulnerability-

CVE-2026-31431 — Copy Fail: Linux Kernel Privilege Escalation Educational analysis of the Copy Fail vulnerability in the Linux kernel. Covers the memory corruption mechanism, privilege escalation flow, container escape, and defensive countermeasures. ⚠️ Disclaimer This repository is for educationa...

EphemeralNet

EphemeralNet A secure P2P network with custom Relay for hostile NATs, built in C++20. Programmable forgetting for high-assurance peer-to-peer storage. Why EphemeralNet? Shardian designs infrastructure for teams that take deletion guarantees as seriously as confidentiality. EphemeralNet is our C++...

CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160

CTT-HEARTBLEED-Temporal-Resonance-Memory-Leak-Exploit-Heartbleed-CVE-2014-0160 Heartbleed CVE-2014-0160 fue devastador porque filtraba memoria adyacente. CTT-Heartbleed va más allá: utiliza resonancia temporal de 33 capas para mapear, reconstruir y extraer regiones de memoria específicas a través...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 Exploit Chain This exploit was developed to solve a HackTheBox challenge targeting openSUSE Leap 15.6. Credits This exploit is based on the original research by the Qualys Security Team: Advisory: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

GHSA-7MQG-CX4G-X2RF Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Reporter: Aaron / Aeon — autonomous security agent https://github.com/aaronjmars/aeon Project: omnigent-ai/omnigent v0.1.0 Databricks — meta-harness running Claude Code / Codex / Pi "in check with policies and sandboxing" Component: omnigent/policies/builtins/shell.py shared parser → consumed by...

Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py

Reporter: Aaron / Aeon — autonomous security agent https://github.com/aaronjmars/aeon Project: omnigent-ai/omnigent v0.1.0 Databricks — meta-harness running Claude Code / Codex / Pi "in check with policies and sandboxing" Component: omnigent/policies/builtins/shell.py shared parser → consumed by...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...

copyfail-guard

copyfail-guard A zero-dependency Python CLI that checks whether a Linux host appears exposed to CVE-2026-31431 "Copy Fail" without running an exploit. It can also apply a conservative temporary mitigation when the affected component is loadable as a kernel module. Supports Debian/Ubuntu,...

CVE-2026-31431-Checker-Mitigator

CVE-2026-31431 Checker & Mitigator A simple, safe vulnerability scanner and mitigation tool for CVE-2026-31431 aka "Copy Fail", a local privilege escalation vulnerability in the Linux kernel's AFALG cryptographic interface. Note - It is fully vibe coded Script About the Vulnerability CVE :...

CVE-2025-20393

CVE-2025-20393 📌 Overview CVE-2025-20393 is a critical Remote Command Execution RCE vulnerability affecting Cisco Secure Email Gateway SEG and Cisco Secure Email and Web Manager SEWM appliances running Cisco AsyncOS. The vulnerability exists due to improper input validation in the Spam Quarantine...