threatbox

Threatbox - 标准攻击平台 ThreatBox 是一个基于 Linux 的标准化受控攻击平台。我使用该平台的某个版本已有多年。它最初是一系列脚本的集合，后来演变为一个滚动的虚拟机，再后来变成用于构建 Linux ISO 的代码，现在则已转换为一套 Ansible 剧本。为什么用 Ansible？为什么不呢？这似乎是标准攻击平台配置的下一步自然演进。 本项目使用 Ansible 剧本和角色来对 Linux 目标机（已在 Ubuntu 18.04 上测试）进行部署后配置。 该项目旨在作为创建、管理和使用标准攻击平台（用于红队或渗透测试）的启动流程。...

CVE-2025-34190 Vasion Print (formerly PrinterLogic) PrinterInstallerClientService Authentication Bypass via LD_PRELOAD Hooking

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 macOS/Linux client deployments are vulnerable to an authentication bypass in PrinterInstallerClientService. The service requires root privileges for certain...

RHEL 7 : Satellite 6.4 (RHSA-2018:2927)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2927 advisory. Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitorin...

[SECURITY] Fedora 14 Update: ocsinventory-agent-1.1.2.1-1.fc14

Open Computer and Software Inventory Next Generation is an application designed to help a network or system administrator keep track of computer configuration and software installed on the network. It also allows deploying softwares, commands or files on Windows and Linux client computers...