commix

Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

openvpn-install

openvpn-install OpenVPN installer for Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux and AlmaLinux. This script will let you setup and manage your own secure VPN server in just a few seconds. What is this? This script is meant to be run on your own...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

CVE-2018-19788

CVE-2018-19788 的概念验证 ========= 用于检查 CVE-2018-19788 漏洞的 Ansible 角色，该漏洞影响 PolicyKit 版本 0.115，此版本预装在许多 Linux 发行版中，例如 Ubuntu、Red Hat、CentOs 等。 环境要求 最低要求的 Ansible 版本为 2.4.0 角色变量 root@kitploit: The user name to be provisioned to execute the exploit CVE201819788testuser: cvetest The UID assigned to...

LooneyPwner

LooneyPwner Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept PoC exploit tool targeting the critical buffer overflow vulnerability, nicknamed "Looney Tunables," found in the GNU C Library glibc...

CVE-2021-3560_PoC

CVE-2021-3560PoC polkit エクスプロイトスクリプト polkit サービスを使用して root に昇格するための自動スクリプト 必要条件 SSH サーバー GNOME 経由での認証ポップアップを回避するため 脆弱な Linux ディストリビューション: ディストリビューション| 脆弱性の有無 ---|--- RHEL 7| いいえ RHEL 8| はい Fedora 20 またはそれ以前| いいえ Fedora 21 またはそれ以降| はい Debian 10 “buster”| いいえ Debian testing “bullseye”| はい Ubuntu...

vuln-list

vuln-list 自动收集漏洞信息并将其保存为可解析格式 来源 目录| 操作系统| 来源| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1| Amazon Linux| Amazon Linux Security Center| https://alas.aws.amazon.com/...

CVE-2018-14665

CVE-2018-14665 0x00 简介 印度安全研究员Narendra Shinde在X.Org Server软件包中发现了一个普通账号提权root的高危漏洞（CVE-2018-14665），它影响了主要的Linux发行版，包括OpenBSD，Debian，Ubuntu，CentOS，Red Hat和Fedora。 Xorg X项目提供了X Window系统的开源实现（也就是X11，或简称X，它是位图显示的窗口系统。它提供了GUI环境的基本框架：在显示设备上绘制和移动窗口以及交互用鼠标和键盘。 Shinde发现Xorg X服务器无法正确处理和验证至少以下两个命令行参数的参数：...

copy-fail-CVE-2026-31431

复制失败：Linux 发行版 参考：https://xint.io/blog/copy-fail-linux-distributionsthe-demo-5...

defender

🛡️ Linux-Defender.sh 📝 Table of Contents 📌 Overview 🚀 Features 🐧 Supported Distros 📦 Tools Installed ⚙️ Installation Building from Source General 📦 Package Installation Debian .deb Package Arch Linux Package 🧰 Running the Defender 🧾 License 🙋‍♂️ Author ☕ Support & Contribution 📌 Overview Linux...

CVE-2024-3094-Vulnerabity-Checker

CVE-2024-3094-Vulnerabity-Checker 验证你的 XZ Utils 版本不易受到 CVE-2024-3094 的攻击 root@kitploit: ┌──lypd0㉿kali- └─$ ./CVE-2024-3094checker.sh / / \ / \ \ /. | / \ / \ /. | \ / / / / / \ \ / \ / / / / / You are NOT vulnerable to CVE-2024-3094. 背景 CISA（网络安全与基础设施安全局）和开源社区已对 XZ Utils 5.6.0 和 5.6.1...

CopyFail

ローカル権限昇格 / コンテナエスケープ CVE-2026-31431 使用方法： go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail 影響を受けるバージョン： Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42 Alibaba Cloud Linux 2, 3, 4 SUSE 12, 15, 16...

Fragnesia

ローカル権限昇格 CVE-2026-46300 使用方法： CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia 影響を受けるバージョン: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS 24.03-LTS-SP1 24.03-LTS-SP2 24.03-LTS-SP3...

vuln-list-backup

vuln-list 自动收集漏洞信息并以可解析格式保存 来源 目录| 操作系统| 来源| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux 勘误| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine 安全数据库| https://secdb.alpinelinux.org/ amazon/1| Amazon Linux| Amazon Linux 安全中心| https://alas.aws.amazon.com/ amazon/2| Amazon...

Linux Distros Unpatched Vulnerability : CVE-2026-79120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML pag...

Linux Distros Unpatched Vulnerability : CVE-2026-74986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and...

Linux Distros Unpatched Vulnerability : CVE-2026-20769

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software...

Linux Distros Unpatched Vulnerability : CVE-2026-56858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

Linux Distros Unpatched Vulnerability : CVE-2026-19546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation plea...