Dirty-Pipe-CVE-2022-0847-POCs

Dirty-Pipe-CVE-2022-0847-POCs Author: Max Kellermann [email protected] Contributor: Bl4sty https://twitter.com/bl4sty A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann...

dirtypipe-ebpf_detection

dirtypipe-ebpfdetection -- Dirtypipe detection tool This program was made to detect Dirty Pipe exploitation attempts thanks to eBPF. It also monitors nonvulnerable kernels and docker containers. 🛫 If you want more details on how it works please read the blog post ! 🛬 How does it works? Default...

chain-reactor

Chain Reactor Chain Reactor is an open source tool for testing detection and response coverage on Linux machines. The tool generates executables that simulate sequences of actions like process creation and network connection. Chain Reactor assumes no prior engineering experience; the tool consume...

chain-reactor

Chain Reactor Chain Reactor est un outil open source conçu pour tester la couverture de détection et de réponse sur les machines Linux. L'outil génère des exécutables qui simulent des séquences d'actions comme la création de processus et la connexion réseau. Chain Reactor ne requiert aucune...

moonwalk

moonwalk Couvrez vos traces lors de l'exploitation Linux / tests d'intrusion en ne laissant aucune trace dans les journaux système et les horodatages du système de fichiers. 📖 Table des matières Introduction Fonctionnalités Installation Utilisation Contribution Licence ℹ️ Introduction moonwalk est...

moonwalk

moonwalk Cover your tracks during Linux Exploitation / Penetration Testing by leaving zero traces on system logs and filesystem timestamps. 📖 Table of Contents Introduction Features Installation Usage Contribution License ℹ️ Introduction moonwalk is a 400 KB single-binary executable that can clear...

Limon

Limon - Sandbox for Analyzing Linux Malwares Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and...

discover

Discover Scripts Bash et Python personnalisés utilisés pour automatiser diverses tâches de test d'intrusion, notamment la reconnaissance, le scan, l'énumération et la création de charges utiles malveillantes à l'aide de Metasploit. Pour une utilisation avec Ubuntu. Prise en charge limitée de Kali...

Brutal

Désormais, Teensy peut être utilisé pour la pénétration Teensy, comme un rubber ducky. Pourquoi ai-je choisi Teensy ? Parce que le prix est très bon marché pour moi. C’est extrêmement utile pour exécuter des scripts sur une machine cible sans avoir besoin d’interaction humaine avec le clavier...

Brutal

Now Teensy can be use for penetration Teensy like a rubber ducky , why im choose teensy ? because the price very cheap for me . t’s extremely useful for executing scripts on a target machine without the need for human-to-keyboard interaction HID -ATTACK .When you insert the device, it will be...

KubeArmor

KubeArmor est un système de renforcement de la sécurité d'exécution natif cloud qui restreint le comportement tel que l'exécution de processus, l'accès aux fichiers et les opérations réseau des pods, des conteneurs et des nœuds VM a...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

jsql-injection

Description jSQL Injection est une application légère utilisée pour trouver des informations sur une base de données à partir d'un serveur. Elle est gratuite , open source et multiplateforme pour Windows, Linux et Mac, et fonctionne avec Java de la version 21 à 25. jSQL Injection fait également...

ssj

SSJ - Your everyday Linux distribution gone Super Saiyan. Introduction SSJ is a silly little script that makes use of Docker installed on your everyday Linux distribution Ubuntu, Debian, etc. and magically arms it with hundreds of penetration testing and forensic tools. Technical Details SSJ pull...

ssj

SSJ - Votre distribution Linux quotidienne devenue Super Saiyan. Introduction SSJ est un petit script farfelu qui utilise Docker installé sur votre distribution Linux quotidienne Ubuntu, Debian, etc. et l'arme magiquement avec des centaines d'outils de test d'intrusion et de criminalistique...

CVE-2018-14665

CVE-2018-14665 0x00 Introduction Indian security researcher Narendra Shinde discovered a high-risk vulnerability CVE-2018-14665 in the X.Org Server package that allows a regular account to escalate privileges to root. It affects major Linux distributions including OpenBSD, Debian, Ubuntu, CentOS,...

kernel: netfilter: conntrack: remove sprintf usage

A flaw was found in the Linux kernel's netfilter conntrack module. This vulnerability arises from the use of sprintf and insufficient buffer sizing in the manglecontentlen function, which can lead to a stack-out-of-bounds write. An attacker could potentially exploit this memory corruption issue t...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: netfilter: flowtable: publish GC-visible tuple last

A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...