CVE-2022-0185-Case-Study

CVE-2022-0185 案例研究 本案例研究是ECE 9069课程“黑客入门”的一个作业成果：https://whisperlab.org/introduction-to-hacking/ CVE-2022-0185 概述 CVE-2022-0185 是一个基于堆的缓冲区溢出漏洞，存在于 Linux 内核文件系统上下文（Filesystem Context）功能中的 legacyparseparam 函数验证所提供的参数长度的方式中。一个非特权本地用户（如果启用了非特权用户命名空间，则不需要；否则需要命名空间的 CAPSYSADMIN 权限），能够打开一个不支持文件系统上下文...

overwrite

लारावेल नोवा के लिए एक आसान और पूर्ण फ्लेक्सिबल फील्ड, बार-बार और लचीले फील्ड समूहों के लिए उपयुक्त। त्वरित शुरुआत यहाँ एक बहुत ही संक्षिप्त गाइड है जो आपको जल्द से जल्द शुरू करने में मदद करेगा। पूर्ण दस्तावेज़ देखें https://whitecube.github.io/nova-flexible-content पर इंस्टॉल करें root@kitploit:...

CVE-2020-1206

Bei der SMBGhost-Schwachstelle CVE-2020-0796 habe ich über eine Write-What-Where-Primitive-Technik gesprochen, die durch die Ausnutzung eines Integer-Overflow-Bugs den Zeiger Alloc.Userbuffer so ändert, dass er auf eine von uns gewünschte Adresse zeigt und wir dort beliebige Daten schreiben könne...

frida

Frida Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. Learn more at frida.re. Two ways to install 1. Install from prebuilt binaries This is the recommended way to get started. All you need to do is: root@kitploit: pip install frida-tools CLI tools pip...

[SECURITY] [DLA 4755-1] libvncserver security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4755-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA August 25, 2026 https://wiki.debian.org/LTS -...

words-scraper

Words Scraper Selenium based web scraper to generate passwords list. Installation root@kitploit: Download Firefox webdriver from https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSION-HERE.tar.gz $ sudo mv geckodriver /usr/local/bin Make sure it is in your PATH $ geckodriv...

words-scraper

Words Scraper Web scraper basato su Selenium per generare liste di password. Installazione root@kitploit: Scarica Firefox webdriver da https://github.com/mozilla/geckodriver/releases $ tar xzf geckodriver-vVERSIONE-QUI.tar.gz $ sudo mv geckodriver /usr/local/bin Assicurati che sia nel tuo PATH $...

CVE-2023-31705

CVE-2023-31705 descrição Uma vulnerabilidade de Cross-site scripting XSS Refletido no Sourcecodester Task Reminder System 1.0 permite que um usuário autenticado injete javascript malicioso no parâmetro page. Tipo de Vulnerabilidade Cross Site Scripting XSS Fornecedor do Produto Sourcecodster Base...

Searpy

🥀 Searpy 🔧 Strumento di ricerca batch, utilizzabile per raccolta e tracciamento Supporta Python 2 e Python 3 1. Install root@kitploit: git clone https://github.com/j3ers3/Searpy pip install -r requirements.txt 配置API及账号 ./config.py python Searpy -h 2. Help root@kitploit: Searpy Engine Tookit...

Moderate: Red Hat Security Advisory: attr security update

An update for attr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: pam security update

An update for pam is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

multitor

multitor Create multiple TOR instances with load-balancing. Description • Introduction • How To Use • Parameters • Requirements • Docker • Other • License • Wiki Description It provides one single endpoint for clients. Supports HAProxy , socks protocol and http-proxy servers: polipo , privoxy and...

keimpx

Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

navgix

navgix navgix is a multi-threaded golang tool that will check for nginx alias traversal vulnerabilities Techniques Currently, navgix supports 2 techniques for finding vulnerable directories or location aliases. Those being the following: Heuristics navgix will make an initial GET request to the...

audit_couchdb

Audit CouchDB: The simple, clear, CouchDB security assessment Audit CouchDB is a simple tool with a powerful message. Given an Apache CouchDB URL, it will tell you everything you ever wanted to know about its security. Objective Audit CouchDB will perform the following actions: 1. Learn every...

Moderate: Red Hat Security Advisory: assertj-core security update

An update for assertj-core is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

behave

Behave! A Still in Development monitoring browser extension for pages acting as bad boys. NB : This is the code repository of the project, if you're looking for the packed extensions: Firefox: https://addons.mozilla.org/en-US/firefox/addon/behave/ Chrome:...

CVE-2023-2822-demo

CVE-2023-2822-demo Einfache Flask-Anwendung zur Implementierung einer absichtlich verwundbaren Web-App zur Vorführung von CVE-2023-2822. Basiert auf dem Writeup unter...

CVE-2022-0847

Análise da escalada de privilégios no kernel Linux CVE-2022-0847 Dirty Pipe toc Este artigo foi publicado originalmente na conta pública de segurança da Huawei; esta é a versão do blog mais completa. Link da publicação original: https://mp.weixin.qq.com/s/6VhWBOzJ7uu80nzFxe5jpg Introdução à...