PwnTillDawn-Portal-Walkthrough

🔐 Vulnerability Assessment & Penetration Testing VAPT 📌 Project: Target Exploitation Walkthrough ⚠️ This project is for educational and authorized testing purposes only. Unauthorized access to systems is strictly prohibited. 👨‍💻 Author SYAFIQ Role: Lead Penetration Tester 🎯 Target Information...

optee-qemu

CVE-2021-44733: Fuzzing y explotación de un use-after-free en el subsistema TEE del kernel de Linux Recientemente se descubrió una vulnerabilidad de use-after-free en el subsistema TEE del kernel de Linux, hasta la versión 5.15.11 inclusive, y se le asignó CVE-2021-44733 1. A primera vista no...

CVE-2026-46300

Security Research & Legal Disclaimer This repository is for educational and authorized security research purposes only. Permitted Use Understanding security vulnerabilities and exploitation concepts in controlled environments local VMs, isolated labs Studying sandbox isolation mechanisms and thei...

gvfs security update

An update is available for gvfs. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GVFS is the GNOME Desktop Virtual File System layer that allows users to easily...

Silverseal

Silverseal Silverseal es un framework de post-explotación para Linux que demuestra la capacidad de un bootkit UEFI para cargar de forma persistente y sigilosa un rootkit de módulo de kernel basado en Rust en sistemas Linux modernos. El proyecto incluye: silverseal-bootkit: Un bootkit UEFI...

SecureOps-Lab

SecureOps Lab - 实时网络安全评估 概述 对一台大学 Linux 服务器执行了实时网络安全评估。分析过程中发现了活跃的攻击活动，包括暴力破解认证尝试和针对 Log4Shell CVE-2021-44228 的利用尝试。 “协调 IP”指多个源自同一子网的恶意 IP 地址，表明攻击者使用了共享的攻击基础设施或自动化攻击工具同时对系统进行攻击。 威胁分析与发现 暴力破解攻击 检测到来自单个外部 IP 的 144 次失败的 SSH 登录尝试 模式分析显示认证尝试速度极快，与自动化凭据填充行为一致 Log4Shell 利用尝试 在日志中识别出与 CVE-2021-44228...

CVE-2024-1086

CVE-2024-1086 Prueba de concepto Proof-of-Concept universal de escalada de privilegios local para CVE-2024-1086, que funciona en la mayoría de los kernels de Linux entre v5.14 y v6.6, incluyendo Debian, Ubuntu y KernelCTF. La tasa de éxito es del 99.4% en las imágenes de KernelCTF...

reconvault

ReconVault 🔍 The recon notes organizer bug bounty hunters actually asked for. ReconVault is a dark-themed, terminal-aesthetic desktop app for Linux built for security researchers, bug bounty hunters, and CTF players. Ditch the scattered text files and spreadsheets — organize every target's...

CVE-2021-3490

El seguimiento de límites ALU32 de eBPF para operaciones bit a bit AND, OR y XOR en el kernel de Linux no actualizaba correctamente los límites de 32 bits, lo que podría convertirse en lecturas y escrituras fuera de los límites en el kernel de Linux y, por lo tanto, en ejecución arbitraria de...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Dirty Frag and tracked for the xfrm-ESP path as CVE-2026-43284. The issue belongs to the broader Dirty Frag...

CLEANSTART-2026-WY70417 logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem

Security vulnerability affects the util-linux package. A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem...

CLEANSTART-2026-XN90162 Security fix for CVE-2022-0563 applied in: util-linux 2.37.4-r0

Security vulnerability affects the util-linux package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZQ21115 util-linux is a random collection of Linux utilities

Security vulnerability affects the util-linux package. util-linux is a random collection of Linux utilities...

CVE-2026-31431-Analysis

CVE-2026-31431-分析 技术分析报告：Linux内核隔离漏洞利用 CVE-2026-31431...

cve-2026-31431-mitigation

CVE-2026-31431 Copy Fail – 技术缓解工具集 1. 概述 本工具包为运行受影响内核（版本 4.14 至 6.12.84、6.13 至 6.18.21 等）的 Linux 系统提供自动化解决方案，用于 检测并缓解 CVE-2026-31431 漏洞（又名 Copy Fail ）。 该工具集包含： 一个 统一的 Bash 脚本 （mitigatecopyfail.sh），它能够： 运行 Phalanx-CCS （攻击面活跃性检测）和 Silent4Labs （风险评估）。 检测内核配置（CONFIGCRYPTOUSERAPIAEAD=m|y）。 应用相应的缓解措施：...

CLEANSTART-2024-IO65114 linux-pam (aka Linux PAM) before 1

Security vulnerability affects the linux-pam package. linux-pam aka Linux PAM before 1...

CVE-2022-0435-Poc

CVE-2022-0435stack overflow wget https://releases.ubuntu.com/jammy/ubuntu-22.04.5-live-server-amd64.iso mkdir kernel wget https://kernel.ubuntu.com/mainline/v5.13/amd64/linux-headers-5.13.0-051300-generic5.13.0-051300.202106272333amd64.deb wget...

NFtables-IPtables-integration-script

🛡️ Q-Feeds Linux Firewall Blocklist Integration Automated malware IP blocklist for Linux servers — supports nftables and iptables+ipset 📋 Table of Contents Quick Start Overview How It Works Prerequisites Detailed Installation Configuration Usage and Verification Troubleshooting Uninstalling Licens...

FUD-C2-Framework

Ejecución sin archivos y evasión Insect v2 - Framework C2 Insect es un troyano C2 para payloads de Linux con reverse shell y beacon sin archivos. Este troyano se oculta como una utilidad de procesamiento de imágenes BMP de 24 bits. Utiliza stubs de syscall dinámicos , memfdcreate , recursos de...

network-security-snort

Snort IDS/IPS Deployment Lab A full-cycle deployment of Snort 3 as both an Intrusion Detection System passive monitoring and an Intrusion Prevention System active blocking via iptables, validated against four attack vectors across a three-machine virtual network on Kali Linux. The lab proves the...