ParrotSec-Linux-Hardening-Project

ParrotSec Linux - 공공 키오스크 프로젝트 제한적이고 신뢰할 수 있는 환경 설계 및 구현 강화된 커널 - GrSecurity 패치 커널 - PaX 강화 - x PaXctl - x PaXTest - x PaXctld - x 강화된 커널 런타임 매개변수 - x 커널 자체 보호 프로젝트 KSPP - x pti=on - 커널 페이지 테이블 격리 - x slubdebug=ZF - SLUB 경계 표시 및 무결성 검사 - x slubdebug=P - slub/slab 할당자 중독 해제 - x pagepoison=1 - 버디 할...

same_type_object_reuse_exploits

PoC 동일 유형/동일 주소 객체 재사용 익스플로잇 Mathias Krause가 개발한 PoC 익스플로잇으로, https://grsecurity.net/exploitinganddefendingagainstsametypeobjectreuse 블로그와 관련이 있습니다...

pentoo-overlay

Pentoo 침투 테스트 오버레이 보안 도구를 위한 Gentoo 오버레이이자 Pentoo Livecd의 핵심 Pentoo는 침투 테스트와 보안 평가를 위해 설계된 Live CD 및 Live USB입니다. Gentoo Linux를 기반으로 하며, Pentoo는 32비트와 64비트 설치 가능한 livecd로 모두 제공됩니다. Pentoo는 기존 Gentoo 설치를 위한 오버레이로도 사용할 수 있습니다. 패킷 주입 패치가 적용된 wifi 드라이버, GPGPU 크래킹 소프트웨어, 그리고 침투 테스트와 보안 평가를 위한 다양한 도구를...

EUVD-2006-0236

Malware in sbrugna...

EUVD-2017-1536

Malware in sbrugna...

EUVD-2019-14630

Malware in sbrugna...

EUVD-2002-1805

Malware in sbrugna...

EUVD-2008-1939

Malware in sbrugna...

CVE-2019-5023

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

CVE-2002-1826

grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory...

io_uring Same Type Object Reuse Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'iouring Same Type Object Reuse Priv Esc', 'Description' = %q This module exploits a bug in iouring leading to an additional putcred that can be...

same_type_object_reuse_exploits

PoC Same-Type/Same-Address Object Reu...

Kconfig-Hardened-Check - A Tool For Checking The Hardening Options In The Linux Kernel Config

Motivation There are plenty of Linux kernel hardening config options. A lot of them are not enabled by the major distros. We have to enable these options ourselves to make our systems more secure. But nobody likes checking configs manually. So let the computers do their job!...

CVE-2019-5023

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

CVE-2019-5023

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

Design/Logic Flaw

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

CVE-2019-5023

The CVE-2019-5023 entry concerns the grsecurity/PaX patch’s read_kmem function. A temporary buffer allocated in read_kmem is not freed when an invalid address is read, causing a memory leak and potential system crash. A local attacker can trigger this by inducing reads to /dev/kmem with an invali...

CVE-2019-5023

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

CVE-2019-5023: Missing Release of Memory after Effective Lifetime

An exploitable vulnerability exists in the grsecurity PaX patch for the function readkmem, in PaX from version pax-linux-4.9.8-test1 to 4.9.24-test7, grsecurity official from version grsecurity-3.1-4.9.8-201702060653 to grsecurity-3.1-4.9.24-201704252333, grsecurity unofficial from version...

PaX read_kmem Denial of Service Vulnerability

pax is a patch for Linux that is designed to improve system security by preventing the exploitation of memory corruption vulnerabilities. A security vulnerability exists in the grsecurity PaX patch in PaX. An attacker can exploit the vulnerability to cause a system crash memory leak...