CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

cve-2017-5123

CVE-2017-5123 This repository contains a demonstration of CVE-2017-5123 , an ICMP command-and-control backdoor, and a CWE-78 OS Command Injection vulnerable web app. Part of CSC 4308 - Challenge 3. Prerequisites Linux Kernel : 4.13 up to but excluding 4.13.7 Node.js : 10.x npm : 6.x Overview This...

Packet-Sniffer

RootWire A network traffic monitor for GNU/Linux — formerly known as Packet-Sniffer. Frames are captured from one or more network interfaces with a raw socket, timestamped by the kernel itself, decoded layer by layer with the NETProtocols library, and rendered live, written to nanosecond-precisio...

coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

CVE

cve: A collection of code pertaining to CVE-2016-0728 various authors Excerpts from Linux, showing the evolution and fix of the bug Exploit code from Perception Point with added comments that explain what each line does. A short script that uses the leak to increment usage count, useful for...

linux-basics-for-hackers-notes

Linux Basics for Hackers — Course A structured course built from personal study notes of the book Linux Basics for Hackers by OccupyTheWeb. Each module breaks down the core concepts, commands, and practical examples in plain English — straightforward enough for beginners, detailed enough to...

CVE-2020-27786-Kernel-Exploit

CVE-2020-27786 Kernel Exploit Details You can find full details and explaination here: https://1day.dev/notes/Linux-Kernel-n-day-exploit-development TL;DR The vulnerability is a Race Condition that causes a write Use-After-Free. The race window has been extended using the userfaultd technique...

CVE-2022-1011

CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...

chipsec

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

Linux_hardening_and_security

Linuxhardeningandsecurity...

dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

kmon

Linux Kernel Manager and Activity Monitor 🐧💻 The kernel is the part of the operating system that facilitates interactions between hardware and software components. On most systems, it is loaded on startup after the bootloader and handles I/O requests as well as peripherals like keyboards, monitor...

systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

Summary On Linux, [email protected] builds /sys/class/net/ paths from the caller-supplied networkStatsiface value without checking that the resolved path stays inside /sys/class/net. A caller who can create a symlink fixture and control the value passed to this API can make the function...

npm: systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

npm: systeminformation has path traversal in Linux networkStats that allows symlink-based file disclosure outside /sys/class/net vulnerability discovered by ? in WordPress npm systeminformation versions 5.33.14...

EUVD-2026-111101

systeminformation has path traversal in Linux networkStats that allows symlink-based file disclosure outside /sys/class/net...

GHSA-4VJG-VX72-QQ4G systeminformation has path traversal in Linux networkStats() that allows symlink-based file disclosure outside /sys/class/net

Summary On Linux, [email protected] builds /sys/class/net/ paths from the caller-supplied networkStatsiface value without checking that the resolved path stays inside /sys/class/net. A caller who can create a symlink fixture and control the value passed to this API can make the function...

dirtypipetester

Dirty Pipe Vulnerability Check Dirty Pipe CVE-2022-0847 vulnerability check -Run directly to check the vulnerability status of the system you are testing. -To check the vulnerability status of other kernel versions, run by appending x.xx.xxx at the end...

Phisher-man

Phisher-Man2 Samples Phishing tools made for Linux it contains 30 different type of Phishing Pages Requirements made for Linux System if you are using Kali Linux pip install Flask any other Linux distributions pip install Flask apt update sudo apt install apache2 sudo apt-get install xterm usage...

SecureOps-Lab

SecureOps Lab - Live Cybersecurity Assessment Overview Performed a live cybersecurity assessment on a university Linux server. During analysis, active attack activity was identified, including brute-force authentication attempts and exploitation attempts targeting Log4Shell CVE-2021-44228...