commix

Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command injection vulnerabilities. You can visit the collection of screenshots demonstrating some of the features o...

openvpn-install

openvpn-install Installatore OpenVPN per Debian, Ubuntu, Fedora, openSUSE, CentOS, Amazon Linux, Arch Linux, Oracle Linux, Rocky Linux e AlmaLinux. Questo script ti permetterà di configurare e gestire il tuo server VPN sicuro in pochi secondi. Cos'è? Questo script è pensato per essere eseguito su...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

CVE-2021-3560_PoC

CVE-2021-3560PoC Script di exploit per polkit Script automatizzato per l'escalation a root tramite il servizio polkit Requisiti Server SSH questo per evitare popup di autenticazione tramite GNOME Distribuzione Linux vulnerabile: Distribuzione| Vulnerabile? ---|--- RHEL 7| No RHEL 8| Sì Fedora 20 ...

CVE-2018-19788

Proof of Concept per CVE-2018-19788 Ruolo Ansible per verificare la vulnerabilità tracciata come CVE-2018-19788 che colpisce PolicyKit versione 0.115 preinstallata in molte distribuzioni Linux come Ubuntu, Red Hat, CentOs, per citarne alcune. Requisiti Versione minima richiesta di ansible 2.4.0...

CVE-2018-14665

CVE-2018-14665 0x00 Introduzione Il ricercatore di sicurezza indiano Narendra Shinde ha scoperto una vulnerabilità critica CVE-2018-14665 nel pacchetto X.Org Server che consente a un utente normale di elevare i privilegi a root, interessando le principali distribuzioni Linux, tra cui OpenBSD,...

Fragnesia

Privilege escalation locale CVE-2026-46300 Modalità d'uso: CGOENABLED=0 go build -ldflags="-s -w" -o fragnesia . ./fragnesia Versioni interessate: Ubuntu 16.04 LTS RHEL 8,9 Rocky Linux 8,9,10 CentOS Stream 8,9,10 Oracle Linux 8,9 openEuler 20.03-LTS-SP4 22.03-LTS-SP3 22.03-LTS-SP4 24.03-LTS...

CopyFail

Escalation di privilegi locali / fuga dal container CVE-2026-31431 Utilizzo: go build -ldflags="-s -w" -o CopyFail CVE-2026-31431.go ./CopyFail Versioni interessate: Ubuntu 18.04, 20.04, 22.04, 24.04 Debian 11, 12, 13 RHEL 8, 9, 10 CentOS 8 Rocky Linux 8, 9, 10 AlmaLinux 8, 9, 10 Fedora 33-42...

defender

🛡️ Linux-Defender.sh 📝 Indice 📌 Panoramica 🚀 Funzionalità 🐧 Distribuzioni Supportate 📦 Strumenti Installati ⚙️ Installazione Compilazione dal Sorgente Generale 📦 Installazione Pacchetti Pacchetto Debian .deb Pacchetto Arch Linux 🧰 Esecuzione del Defender 🧾 Licenza 🙋‍♂️ Autore ☕ Supporto e...

vuln-list

vuln-list Raccoglie informazioni sulle vulnerabilità e le salva automaticamente in un formato parsabile Fonte...

autocrack

AUTOCRACK.py This python script is a Hashcat https://hashcat.net wrapper to help automate the cracking process. The script includes multiple functions to select a set of wordlists and rules, as well as the ability to run a bruteforce attack, with custom masks, before the wordlist/rule attacks...

LooneyPwner

LooneyPwner Exploit-Tool für CVE-2023-4911, das die 'Looney Tunables'-glibc-Sicherheitslücke in verschiedenen Linux-Distributionen angreift. LooneyPwner ist ein Proof-of-Concept PoC Exploit-Tool, das die kritische Pufferüberlauf-Sicherheitslücke mit dem Spitznamen "Looney Tunables" in der GNU C...

CVE-2024-3094-Vulnerabity-Checker

CVE-2024-3094-Vulnerabity-Checker Verifica che la tua versione di XZ Utils non sia vulnerabile a CVE-2024-3094 root@kitploit: ┌──lypd0㉿kali- └─$ ./CVE-2024-3094checker.sh / / \ / \ \ /. | / \ / \ /. | \ / / / / / \ \ / \ / / / / / You are NOT vulnerable to CVE-2024-3094. Contesto CISA...

vuln-list-backup

vuln-list Sammelt Schwachstelleninformationen und speichert sie automatisch in einem parsbaren Format. Quelle Verzeichnis| Betriebssystem| Quelle| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb|...

Linux Distros Unpatched Vulnerability : CVE-2026-74986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and...

Linux Distros Unpatched Vulnerability : CVE-2026-56858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...

Linux Distros Unpatched Vulnerability : CVE-2026-19546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation plea...

Linux Distros Unpatched Vulnerability : CVE-2026-19143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a...

Linux Distros Unpatched Vulnerability : CVE-2026-17775

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-17814

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation...