sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

Cryptolocker

DISCLAIMER : OUR TOOLS ARE FOR EDUCATIONAL PURPOSES ONLY. DON'T USE THEM FOR ILLEGAL ACTIVITIES. YOU ARE THE ONLY RESPONSABLE FOR YOUR ACTIONS! OUR TOOLS ARE OPEN SOURCE WITH NO WARRANTY AND AS ARE. Cryptolocker Crypto is open source Crypto-Locker. Crypto is developed in Visual C++. It has featur...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 15.9.1 Refer to lunar.sh and changelog for more up to date version information License CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code in audit...

lunar

LUNAR ロックダウンUNIX監査およびレポート バージョン 現在のバージョン 15.9.1 最新のバージョン情報については、lunar.sh および changelog を参照してください。 ライセンス CC BY-SA: https://creativecommons.org/licenses/by-sa/4.0/ ここでサポート: https://ko-fi.com/richardatlateralblast 注意 このコードは監査モードでのみ実行してください（例：-a または --audit スイッチ）。...

CVE-2020-14372

CVE-2020-14372：用一个“简单把戏”绕过（并非那么）安全启动 漏洞详情 有一天我在GRUB2的控制台输入"help"，看到了一些非常“有趣”的命令： readbyte ADDR: 从ADDR读取8位值 writebyte ADDR VAL: 将8位值VAL写入ADDR 我立刻以为我找到了最有趣的安全启动绕过方法，但在安全启动下这些命令会输出如下内容： root@kitploit: error: Secure Boot forbids loading module .../memrw.mod...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06, where it incorrectly enabled the use of the ACPI command when Secure Boot was enabled. This flaw allows an attacker with privileged access to create a Secondary System Description Table SSDT containing code that can overwrite the Linux...

CVE-2026-89745

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

macOS-Security-and-Privacy-Guide

This guide is a collection of techniques for improving the security and privacy of macOS on Apple silicon Macs. It targets experienced users who want security practices commonly used by organizations, but is also suitable for novice users with an interest in privacy and security. For...

CVE-2020-15780-exploit

American Unsigned Language 作者：zx2c4 这两个漏洞利用程序通过ACPI表注入来禁用内核锁定。 amerian-unsigned-language.sh 适用于Ubuntu 18.04 Bionic的4.15内核，使用其自定义补丁和一种技术。CVE-2019-20908。 amerian-unsigned-language-2.sh 适用于主线/上游内核，使用不同的技术。CVE-2020-15780。 每个脚本的头部都包含解释说明。...

Linux Distros Unpatched Vulnerability : CVE-2026-89745

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d relay: update relay to use mmapprepare changed the mmap file operation to mmapprepare for relayf...

CVE-2026-89745

A flaw was found in the Linux kernel's debugfs component. The lockdown mechanism, designed to enhance system integrity, did not properly account for files using the mmapprepare operation. This oversight could allow an attacker to bypass kernel lockdown restrictions when the system is operating in...

CVE-2026-89745

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

CVE-2026-31787

XSA-487 / CVE-2026-31787 Linux 内核 Xenprivcmd 驱动中的双重释放漏洞 Linux 内核 Xen privcmd 驱动中存在的内核内存双重释放漏洞，可导致绕过内核锁定（安全启动）。利用该漏洞需要 root 级访问权限，这限制了其更广泛的安全影响。 | ---|--- 公告| XSA-487 CVE| CVE-2026-31787 组件| Linux 内核 — Xen privcmd 驱动 公开日期| 2026-04-28 发现者| Atharva Vartak @0xAth4rv...

CVE-2026-89745 debugfs: Fix lockdown check for mmap_prepare

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

CVE-2026-89745 debugfs: Fix lockdown check for mmap_prepare

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

CVE-2026-89745

This Linux kernel vulnerability affects the debugfs subsystem. A prior commit changed relayfs from using the mmap file operation to mmap_prepare, but the corresponding lockdown check in debugfs was not updated. As a result, when the kernel is in integrity mode , debugfs fails to lock down files t...

EUVD-2026-76657

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmapprepare Commit 651fdda8406d "relay: update relay to use mmapprepare" changed the mmap file operation to mmapprepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

SpamChannel

SpamChannel 实时 worker 托管在 https://spamchannel.haxxx.workers.dev 更新（2023年8月13日）：在我 DEFCON 31 演讲的两天后，MailChannels 悄然决定要求Domain Lockdown Record 才能从 Cloudflare Workers 发送电子邮件，这意味着这段代码已经不再有效。然而，因为他们只是解决了“症状”而非根本问题（缺乏发件人身份验证），任何人都仍可以在他们的网站上注册（80 美元）并使用他们的“正常”SMTP 中继来伪造其所有客户域名 🤷🏻‍♂️ 这是什么 截至撰写本文时，这允许你使用...

PT-2026-90461

In the Linux kernel, the following vulnerability has been resolved: debugfs: Fix lockdown check for mmap prepare Commit 651fdda8406d "relay: update relay to use mmap prepare" changed the mmap file operation to mmap prepare for relayfs, but the lockdown check in debugfs was not updated accordingly...

WindowsJobLock

使用作业对象进行 Windows 进程锁定 一款使用作业对象（Job Objects）的 Microsoft Windows 进程锁定工具 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 由 Ollie Whitehouse 开发，ollie dot whitehouse at nccgroup dot com https://github.com/nccgroup/WindowsJobLock 根据 AGPL 许可证发布，更多信息请参阅 LICENSE Windows 作业对象概述 阅读 -...