ved-ebpf

VED-eBPF: Detección de Exploits y Rootkits del Kernel usando eBPF VED Vault Exploit Defense-eBPF aprovecha eBPF extended Berkeley Packet Filter para implementar monitoreo de seguridad del kernel en tiempo de ejecución y detección de exploits para sistemas Linux. Introducción eBPF es una máquina...

deception-as-detection

Engaño como Detección Técnicas de detección basadas en engaño mapeadas a las Tácticas, Técnicas y Conocimiento Común Adversarial de MITRE ATT&CK™: Matriz de Técnicas de Windows Matriz de Técnicas de Linux Matriz de Técnicas de Mac 📔 Historias de Engaño Se ha creado una historia de engaño de muest...

Dirty-Pipe

Dirty Pipe Exploit CVE-2022-0847 Overview This repository contains a Proof of Concept PoC exploit for the Dirty Pipe vulnerability CVE-2022-0847 , which affects Linux kernel versions 5.8 to 5.16. This vulnerability allows local privilege escalation by exploiting improper handling of pipe buffers ...

postfetch

postfetch Postfetch posture fetch es una herramienta de auditoría de privacidad y seguridad para Linux al estilo de fastfetch, escrita en Rust. En lugar de información cosmética del sistema, postfetch muestra si tu sistema está configurado para soportar privacidad, seguridad, control local y...

scallion

2020 Project Update Scallion was a hobby project to learn OpenCL and RSA. We are not currently maintaining scallion. It has bitrotted in two important ways: 1. Tor has moved on to v3 Onion addresses, which scallion does not support. Old v2 addresses will stop working in October of 2021. The new...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

sgx-step

Un marco práctico de ataque para el control preciso de la ejecución de enclaves SGX-Step es un marco de trabajo de código abierto para facilitar la investigación de ataques de canal lateral en procesadores Intel x86 en general y en plataformas Intel SGX en particular. SGX-Step consiste en un...

Portspoof

Portspoof Portspoof emula puertos abiertos y firmas de servicios en los 65535 puertos TCP, convirtiendo la fase de reconocimiento de un escaneo rápido en un proceso largo e intensivo en recursos. Los escáneres ven miles de servicios falsos pero convincentes, lo que hace poco práctico identificar ...

librepods

!WARNING librepods.org is not an official website of the LibrePods project. It inaccurately claims to be the official website of the project by claiming copyrights and using the LibrePods logo in the footer. And at the same time, they say that the project is not affiliated with the LibrePods...

CVE-2026-53359

CVE-2026-53359 A 16-year-old bug in the Linux kernel lets a rented VM break out and attack the host it runs on. Januscape is a use-after-free vulnerability in the KVM code that has been sitting there since 2010. Using the exploit-check.sh script, we can get more vuln info about the Linux Kernel...

CVE-2026-98372

The Linux kernel contains a stack out-of-bounds (OOB) read vulnerability in the xfrm: iptfs component. The issue stems from the iptfs_skb_reset_frag_walk() function, which uses an unbounded loop to advance fragments without checking if the index exceeds the nr_frags limit. While one caller is pro...

EUVD-2026-93357

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfsskbresetfragwalk iptfsskbresetfragwalk advances to the fragment containing @offset with an unbounded loop: while offset = walk-past + walk-fragswalk-fragi.len walk-past +=...

EUVD-2026-93356

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner totlen When the start of an inner packet is split across two outer packets such that fewer than 4 bytes land at the end of the first one, inputprocesspayload saves those byt...

CVE-2026-98371

The Linux kernel contains a vulnerability in the xfrm: iptfs component where an attacker can trigger an unprivileged kernel panic (DoS) . The issue occurs during runt reassembly when an inner packet is split across outer packets; if the first fragment contains fewer than 4 bytes, __input_process_...

CVE-2026-98369

The Linux kernel contains a vulnerability in the xfrm component related to how transport-mode packets are reinjected. When xfrm_trans_reinject was converted to a workqueue, it began running in process context without an RCU read lock , triggering RCU lockdep warnings during finish callbacks (like...

CVE-2026-98370

The Linux kernel contains a use-after-free vulnerability in the xfrm component during ALLOCSPI requests. The issue arises because xfrm_state_netlink() and xfrm_alloc_userspi() perform redundant alloc_compat() calls. For compatibility requests, this causes the translator to misinterpret the 228-by...

EUVD-2026-93354

In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcureadlock, skbdstforce and devhold for xfrmtransreinject syzbot reported a suspicious RCU usage warning in ip6pktdrop: WARNING: suspicious RCU usage in ip6pktdrop include/net/addrconf.h:389 suspicious...

EUVD-2026-93355

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrmstatenetlink builds the ALLOCSPI response with dumponestate, which already calls alloccompat with the response skb and header. xfrmallocuserspi then calls alloccompat again, bu...

CVE-2026-98368

The Linux kernel contains a vulnerability in the ESP (Encapsulating Security Payload) protocol when handling the out-of-place output path (esp->inplace == false ). The issue arises because ESP mutates the skb frag array without properly downgrading zerocopy managed frags (SKBFL_MANAGED_FRAG_RE...

EUVD-2026-93353

In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path esp-inplace == false ESP rewrites the skb frag array: espoutputhead appends a trailer frag and espoutputtail replaces the frags with ...