looney-tunables-CVE-2023-4911

PoC of CVE-2023-4911 Looney Tunables This is a PoC of CVE-2023-4911 a.k.a. "Looney Tunables" exploiting a bug in glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. Getting Started Executing program We can check if target is vulnerable root@kitploit: env -i...

cve-2023-4911-exploit-optimized

Security Notice : This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test. CVE-2023-4911 Exploit Looney Tunables Optimized, multi-processing exploits for CVE-2023-4911 targeting x8664 and...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

CVE-2024-6387_poc

CVE-2024-6387 Proof of Concept PoC Description This repository contains a PoC for vulnerability CVE-2024-6387, which targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. The vulnerability allows remote code execution as root by calling...

CVE-2015-7547-proj-master

We are providing this code as-is. You are responsible for protecting yourself, your property and data, and others from any risks caused by this code. This code may cause unexpected and undesirable behavior to occur on your machine. This code may not detect the vulnerability on your system. Note...

heaptrace

About heaptrace is a heap debugger for tracking glibc heap operations in ELF64 x8664 binaries. Its purpose is to help visualize heap operations when debugging binaries or doing heap pwn. replaces addresses with easy-to-understand symbols detects heap corruption and memory leakage issues can debug...

cve-2024-6387_AImade

Presentation of the Test Code for CVE-2024-6387 Introduction This document presents a Python script designed to test the vulnerability CVE-2024-6387, identified in OpenSSH. This vulnerability is a race condition in the SIGALRM signal handler that can allow remote code execution RCE on glibc-based...

test_iconv

Testing CVE-2024-2961 V1 - Under Analysis This repository contains a C program to test for CVE-2024-2961, which involves a buffer overflow vulnerability in the iconv function of the GNU C Library glibc. Due to the structure of PHP’s heap, this overflow can be exploited to modify part of a free li...

CVE-2024-6387

CVE-2024-6387 This is an altered PoC for d0rb/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them...

ssh_poc2024

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

CVE-2023-4911

CVE-2023-4911 This is a PoC for CVE-2023-4911 "Looney Tunables" that exploits a bug in the glibc dynamic loader's GLIBCTUNABLES environment variable parsing function parsetunables. This is a rewrite of the C PoC's into a pure python approach. I did this to make it easier to customize the exploit...

CVE-2015-0235-cookbook

CVE-2015-0235-cookbook 이 쿡북은 CVE-2015-0235에 취약한지 여부를 테스트합니다. 현재 동작은 테스트가 실패하면 오류를 발생시킵니다: root@kitploit: bash 'test vulnerability against libc' do cwd Chef::Config:filecachepath code -EOH ./CVE-2015-0235 EOH returns 1 end Debian 계열 시스템: CVE-2015-0235 Rhel 계열 시스템: CVE-2015-0235 지원 플랫폼 Debian /...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

LooneyPwner

LooneyPwner Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept PoC exploit tool targeting the critical buffer overflow vulnerability, nicknamed "Looney Tunables," found in the GNU C Library glibc...

CVE-2023-4911

glibc 힙 버퍼 오버플로우 취약점CVE-2023-4911 항목| 내용 ---|--- CVE ID| CVE-2023-4911 공격 유형| 힙 버퍼 오버플로우 → 로컬 권한상승Local Privilege Escalation CVSS 3.1| 7.8 High 공개일| 2023-10-03 취약 포인트| glibc 동적 로더ld.so의 GLIBCTUNABLES 파서 취약 버전| glibc 2.342.38 1. 개요 CVE-2023-4911은 GNU C Libraryglibc의 동적 로더가 GLIBCTUNABLES 환경변수를 파싱하는...

CVE-2024-6387-how-to-fix

CVE-2024-6387-수정-방법 취약점 해결 및 완화CVE-2024-6387 CVE-2024-6387: OpenSSH의 치명적인 RCE 취약점 'regreSSHion' 내 LinkedIn 기사 CVE 세부 정보 설명 Qualys 위협 연구 부서TRU는 'regreSSHion'이라는 심각한 보안 결함을 상세히 설명했으며, 이로 인해 수백만 대의 Linux 시스템이 원격 코드 실행RCE에 취약해집니다. CVE-2024-6387로 식별되었으며 2024년 5월에 발견된 이 취약점은 glibc 기반 Linux 시스템의 OpenSSH...

heapinspect

HeapInspect Pwnning is an art. HeapInspect is designed to make heap much more prettier. Now this tool is a plugin ofnadbg. Try it! Features Free of gdb and other requirement Multi glibc support 2.19, 2.23-2.27 currently tested both 32bit and 64bit Nice UI to show heap HeapShower detailed...

heapinspect

HeapInspect Pwnning은 예술입니다. HeapInspect는 heap을 훨씬 더 예쁘게 보이도록 설계되었습니다. 이제 이 도구는nadbg의 플러그인입니다. 사용해보세요! 기능 gdb 및 다른 요구 사항 없이 작동 멀티 glibc 지원 2.19, 2.23-2.27 현재 테스트됨 32비트 및 64비트 모두 힙을 보여주는 깔끔한 UI HeapShower 자세히 PrettyPrinter 색상, 요약 Heapdiff 작동 중 손상 감지 및 익스플로잇 분석 작동 중 gdb도 지원 Python2 및 Python3 호환 사용법 ...

cve-2024-6387-poc

cve-2024-6387-poc OpenSSH 서버sshd의 시그널 핸들러 경쟁 조건Race Condition 7etsuo 설명 CVE-2024-6387에 대한 익스플로잇으로, glibc 기반 Linux 시스템에서 OpenSSH 서버sshd의 시그널 핸들러 경쟁 조건을 대상으로 합니다. 이 취약점은 SIGALRM 핸들러에서 async-signal-unsafe 함수가 호출되어 루트 권한으로 원격 코드 실행을 허용합니다. 익스플로잇 세부 정보 취약점 요약 이 익스플로잇은 OpenSSH sshd의 SIGALRM 핸들러 경쟁 조건을...

cve-2015-7547-public

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS stub resolver To test on local machine with a vulnerable glibc version: root@kitploit: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee -a...