local-exploits

Local Exploits Vari exploit locali CVE-2020-8793 opensmptd-makemap-lpe - exploit locale per root di OpenSMTPD makemap su Fedora 31. Codice in gran parte tratto dall'avviso di Qualys 2020-02-24 per CVE-2020-8793. opensmtpd: la lettura di file arbitrari da parte di un utente non privilegiato può...

Openbsd-Privilege-Escalation

Openbsd-Élévation-de-privilèges Un script qui automatise le processus d'élévation de privilèges sur un système OpenBSD CVE-2019-19520 en exploitant le binaire xlock et en récupérant son sgid, puis en s'élevant jusqu'à l'utilisateur root via CVE-2019-19522 en exploitant les privilèges du groupe au...

team-teso

team-teso Il TESO-CVS è stato donato a THC alla festa del 10° anniversario di THC nel 2005 Berlino. È pubblicato qui solo per scopi educativi. DIVERTITI. Alcuni artefatti non sono mai stati ospitati sul CVS e sono persi nel tempo: Lo sfruttamento SSH di TESO Molti ohh, così tanti! exploit per...

CVE-2020-7247

CVE-2020-7247 Exploit de Preuve de Concept pour CVE-2020-7247 Exécution à distance sur OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 testé sur: OpenBSD 6.6 crédits à Marco Ivaldi [email protected] pour le payload Utilisation remote $ go run CVE-2020-7247.go -u...

openbsd_ov1

OpenBSD TCP/IP-Überlauf Getestet mit dem neuesten OpenBSD 7.2 Details: root@kitploit: int ipdooptionsstruct mbuf m, struct ifnet ifp ... for ; cnt 0; cnt -= optlen, cp += optlen opt = cpIPOPTOPTVAL; if opt == IPOPTEOL break; if opt == IPOPTNOP optlen = 1; else if cnt cnt code = &cpIPOPTOLEN - uch...

exploit_mitigations

Mitigações de Exploração O objetivo é listar mitigações de exploração adicionadas ao longo do tempo em vários sistemas operativos, software, bibliotecas ou hardware. É útil saber se uma determinada vulnerabilidade é facilmente explorável ou não, dependendo das mitigações de exploração em vigor. U...

exploit_mitigations

Exploitation Mitigations The goal is to list exploitation mitigations added over time in various operating systems, software, libraries or hardware. It becomes handy to know if a given vulnerability is easily exploitable or not depending on exploitation mitigations in place. An example is the...

CVE-2020-7247

CVE-2020-7247 Questa vulnerabilità esiste nella funzione “smtpmailaddr” del server di posta OpenSMTPD di OpenBSD, e interessa la versione 6.6 di OpenBSD. Ciò permette a un attaccante di eseguire comandi shell arbitrari come “sleep 66” come utente root. Come usare? python3 getShell.py Se hai bisog...

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

CVE-2026-41285-OpenBSD-v6daemons-go-brrr

CVE-2026-41285: Un pacchetto uccide IPv6 su OpenBSD Un singolo pacchetto ICMPv6 appositamente costruito proveniente dalla rete locale blocca permanentemente slaacd e/o rad. L'autoconfigurazione degli indirizzi IPv6 SLAAC cessa finché qualcuno non riavvia manualmente il demone. Nessuna...

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

TriforceOpenBSDFuzzer

TriforceOpenBSDSyscallFuzzer 20160825 https://github.com/nccgroup/TriforceOpenBSDFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] Questa è una raccolta di file utilizzata per eseguire il fuzzing delle system call su OpenBSD amd64 usando TriforceAFL cioè AFL e QEMU. Per...

CVE-2026-49426 Incorrect audit records for ptrace(2) syscall requests

When auditing a system call executed via ptracePTSCREMOTE, the kernel passed the return value of an internal setup function to AUDITSYSCALLEXIT rather than the actual result of the executed system call. As a result, committed audit records for system calls which returned an error do not reflect t...

Exploit for Race Condition in Openbsd Openssh

No d...

[SECURITY] Fedora 43 Update: openssh-10.0p1-11.fc43

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 44 Update: openssh-10.2p1-13.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

[SECURITY] Fedora 44 Update: openssh-10.2p1-12.fc44

SSH Secure SHell is a program for logging into and executing commands on a remote machine. SSH is intended to replace rlogin and rsh, and to provide secure encrypted communications between two untrusted hosts over an insecure network. X11 connections and arbitrary TCP/IP ports can also be forward...

The vulnerability of the sppp_pap_input() function in the if_spppsubr.c script of the OpenBSD operating system allows a hacker to circumvent security restrictions.

The vulnerability of the sppppapinput function in the ifspppsubr.c script of the OpenBSD operating system is related to deficiencies in the mechanism for restricting the amount of input data. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

OPENSUSE-SU-2026:21179-1 Security update for lrzip

This update for lrzip fixes the following issues: Changes in lrzip: - Update to version 0.660: Do not clean up thread structures in decompression failure conditions, fixing a use-after-free in lzmadecompressbuf and a NULL pointer dereference in ucompthread on corrupt/malicious archives...

OpenBSD Resource Management Vulnerability (CNVD-2026-26371)

OpenBSD is a Unix-like operating system that focuses on security and code quality. There is a resource management vulnerability in OpenBSD. This vulnerability stems from the use of the syssem.get function in sys/kern/sysvsem.c, where a memory error occurs due to a context switch after tsleep. An...