team-teso

team-teso The TESO-CVS was giften to THC at THC's 10th anniversary party in 2005 Berlin. It is published here for educational purposes only. ENJOY. Some artifacts were never hosted on the CVS and are lost in time: TESO's ssh exploit Many ohh so many! OpenBSD exploits including the world's first...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

CVE-2020-7247

CVE-2020-7247 Esta vulnerabilidad existe en la función “smtpmailaddr” del servidor de correo OpenSMTPD de OpenBSD, y afecta a OpenBSD versión 6.6. Esto permite a un atacante ejecutar comandos de shell arbitrarios como “sleep 66” como usuario root ¿Cómo usar? python3 getShell.py Si necesitas una...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

exploit_mitigations

Mitigaciones de explotación El objetivo es listar las mitigaciones de explotación añadidas a lo largo del tiempo en varios sistemas operativos, software, librerías o hardware. Resulta útil saber si una vulnerabilidad determinada es fácilmente explotable o no según las mitigaciones de explotación...

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] This is a collection of files used to perform system call fuzzing of OpenBSD amd64 using TriforceAFL i.e. AFL and QEMU. To use it you will...

local-exploits

Local Exploits Various local exploits CVE-2020-8793 opensmptd-makemap-lpe - Fedora 31 OpenSMTPD makemap local root exploit. Code mostly taken from Qualys advisory 2020-02-24 for CVE-2020-8793. opensmtpd: Reading of arbitrary file by unprivileged attacker can result in information disclosure or...

openbsd_ov1

OpenBSD TCP/IP overflow Tested with latest OpenBSD 7.2 Details: root@kitploit: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip;...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: Un Paquete Mata IPv6 en OpenBSD Un paquete ICMPv6 manipulado desde la red local deja permanentemente colgados slaacd y/o rad. La autoconfiguración de direcciones IPv6 SLAAC muere hasta que alguien reinicie manualmente el demonio. Sin autenticación, sin privilegios, 18 bytes de car...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

Astra Linux – Vulnerability in Linux

A issue was discovered in the kernel of OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can exploit this to inject arbitrary network packets, regardless of the network configuration...

CVE-2020-7247

CVE-2020-7247 Exploit de Prueba de Concepto para CVE-2020-7247 Ejecución Remota en OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 probado en: OpenBSD 6.6 créditos a Marco Ivaldi [email protected] por el payload Uso remote $ go run CVE-2020-7247.go -u 192.168.0.2...

Openbsd-Privilege-Escalation

Openbsd-Escalada-De-Privilegios Un script que automatiza el proceso de escalar privilegios en el sistema OpenBSD CVE-2019-19520 explotando el binario xlock y obteniendo su sgid y escalando al usuario root mediante CVE-2019-19522 explotando los privilegios del grupo auth y agregando claves a Skey ...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c. The reversed TKIP MIC failure countermeasure window check allows unauthenticated attackers within RF range to send two malformed TKIP frames s...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

EUVD-2026-72935

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2022-50999

creationtimestamp| type| source ---|---|--- 2026-08-25 18:56:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwioadzaj2v 2026-09-02 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujlhzuqxc2l...