sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

CVE-2020-7247

CVE-2020-7247 This vulnerability exists in OpenBSD’s mail server OpenSMTPD’s “smtpmailaddr” function, and affects OpenBSD version 6.6. This allows an attacker to execute arbitrary shell commands like “sleep 66” as root user How to use? python3 getShell.py If you need a reverse shell then run it...

team-teso

team-teso TESO-CVS는 2005년베를린에 열린 THC의 10주년 파티에서 THC에 기증되었습니다. 교육 목적으로만 여기에 공개됩니다. 즐기세요. 일부 아티팩트는 CVS에 저장된 적이 없어 시간 속으로 사라졌습니다: TESO의 ssh 익스플로잇 수많은오, 정말 많은! OpenBSD 익스플로잇세계 최초의 OpenBSD 원격 0day 포함 Stacheldraht & Blitzkrieg 너무 많은 사진들증거물,콜록 콜록이 바다에 던져졌습니다. 아직 말해지지 않은 너무 많은 이야기들. ..."잃어버린" 아티팩트를 가지고 있...

exploit_mitigations

Меры защиты от эксплуатации Цель — перечислить меры защиты от эксплуатации, добавленные с течением времени в различных операционных системах, программах, библиотеках или оборудовании. Это удобно для определения, насколько легко эксплуатировать данную уязвимость в зависимости от имеющихся мер...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] 이것은 TriforceAFL즉, AFL 및 QEMU을 사용하여 OpenBSD amd64의 시스템 콜 퍼징을 수행하는 데 사용되는 파일 모음입니다. 이를 사용하려면...

local-exploits

로컬 익스플로잇 다양한 로컬 익스플로잇 CVE-2020-8793 opensmptd-makemap-lpe - Fedora 31 OpenSMTPD makemap 로컬 루트 익스플로잇. 코드는 대부분 Qualys 권고 2020-02-24에서 가져온 것으로, CVE-2020-8793에 대한 것입니다. opensmtpd: 권한이 없는 공격자가 임의의 파일을 읽으면 정보 공개 또는 권한 상승으로 이어질 수 있음 fedora-all CVE-2020-7247 root66 OpenBSD 6.6 OpenSMTPD 6.6 로컬 루트 익스플로잇...

openbsd_ov1

OpenBSD TCP/IP 오버플로우 최신 OpenBSD 7.2에서 테스트함 세부 사항: root@kitploit: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uchar ip; goto bad; swit...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: OpenBSD에서 IPv6를 죽이는 단일 패킷 로컬 네트워크에서 보낸 조작된 ICMPv6 패킷 하나가 slaacd 및/또는 rad를 영구적으로 중단hang시킵니다. 누군가 수동으로 데몬을 재시작할 때까지 IPv6 SLAAC 주소 자동 구성이 중단됩니다. 인증도, 권한도 필요 없으며 ICMPv6 페이로드는 18바이트에 불과합니다...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

Astra Linux – Vulnerability in Linux

A issue was discovered in the kernel of OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can exploit this to inject arbitrary network packets, regardless of the network configuration...

CVE-2020-7247

CVE-2020-7247 CVE-2020-7247에 대한 개념 증명 익스플로잇 OpenSMTPD 6.6.2에서 원격 실행 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 테스트 환경: OpenBSD 6.6 페이로드 제공: Marco Ivaldi [email protected] 사용법 remote $ go run CVE-2020-7247.go -u 192.168.0.2 -p 25 -d example.org Linux가 아닌 경우 소스 코드에서 nc 리스너를...

Openbsd-Privilege-Escalation

Openbsd-Privilege-Escalation OpenBSD 시스템에서 권한을 상승시키는 과정을 자동화하는 스크립트입니다. CVE-2019-19520 xlock 바이너리를 악용하여 sgid를 획득하고, CVE-2019-19522 auth 그룹의 권한을 악용하여 Skey 또는 Yubikey에 키를 추가하여 root 사용자로 권한을 상승시킵니다. C 코드는 원본 PoC를 거의 그대로 복사한 것입니다: https://www.openwall.com/lists/oss-security/2019/12/04/5 CVE-2019-1952...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101

OpenBSD before commit 1ee99df contains an inverted comparison in the ieee80211_michael_mic_failure() function within sys/net80211/ieee80211_crypto_tkip.c. The reversed TKIP MIC failure countermeasure window check allows unauthenticated attackers within RF range to send two malformed TKIP frames s...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

EUVD-2026-72935

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2026-56101 OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211michaelmicfailure function within sys/net80211/ieee80211cryptotkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated by mor...

CVE-2022-50999

creationtimestamp| type| source ---|---|--- 2026-08-25 18:56:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtwioadzaj2v 2026-09-02 09:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mujlhzuqxc2l...