CVE-2016-10924

CVE-2016-10924 CVE-2016-10924 - WordPressプラグインebook-download 1.2 におけるディレクトリトラバーサルの脆弱性。 PythonによるPoC + PIDブルートフォース。 使用方法 root@kitploit: git clone https://github.com/rvizx/CVE-2016-10924 cd CVE-2016-10924 python pidbrute.py...

nysm

nysm Стелс-контейнер для пост-эксплуатации. Содержание 1. Введение 2. Установка 2.1 Требования 2.2 Заголовки Linux 2.3 Сборка 3. Использование 3.1 Примеры 4. Как это работает 4.1 В общем 4.2 Скрытие объектов eBPF 4.3 Скрытие логов Auditd 4.4 Скрытие PID 4.5 Скрытие сокетов 5. Ограничения...

impersonate-rs

IRS Impersonate-RS 💡 IRS는 https://github.com/zblurx/impersonate-rs의 라이브러리 버전입니다. zblurx Defte의 Impersonate를 순수 Rust로 다시 구현한 것입니다. 자세한 내용은 이 블로그 게시물을 참조하세요. 토큰 가장 방식은 Defte Impersonate와 약간 다릅니다. 여기서는 Primary Token을 가장하려는 PID를 선택해야 하며, 그러면 irs.exe가 다음을 수행합니다: 1. 토큰을 복제합니다. 2. 명명된 파이프를 생성합니다명령 실행 출력...

dismember

🔪 Dismember Dismember is a command-line toolkit for Linux that can be used to scan the memory of all processes or particular ones for common secrets and custom regular expressions, among other things. It will eventually become a full /proc toolkit. Using the grep command, it can match a regular...

truffleproc

truffleproc — プロセスメモリ内の秘密情報を探す 使い方 現在の Bash シェル（例: $$）に対して truffleproc.sh を実行します: root@kitploit: $ ./truffleproc.sh $$ coredumping pid 6174 Reading symbols from od... Reading symbols from /usr/lib/systemd/systemd... Reading symbols from /lib/systemd/libsystemd-shared-247.so... Reading symbols fro...

CVE-2026-80929

A flaw was found in the Linux kernel. A non-root user can exploit a vulnerability in the sysctl mechanism, specifically related to the cadpid entry. By unsharing process ID PID and user namespaces, a local attacker can modify this global system control from a child namespace. This allows a user...

process-enumeration-stealth

🚴 process-enumeration-stealth 이게 뭔가요? 이것은 \ntfs\ 기본 디바이스Windows 파일 시스템 기본 개체를 쿼리하여 현재 NTFS를 사용 중인 PID 목록을 반환할 수 있게 해주는 간단한 PoC입니다. 이 방법을 사용하면 NtQuerySystemInformation이나 상위 수준의 EnumProcesses와 같은 일반적인 API를 사용할 필요가 없습니다. 이 특이한 정찰 방법을 사용하면 운영자가 엔드포인트에서 일반적인 모니터링을 회피할 수 있습니다 🎉. 이 트릭을 원래 발견해 주신 Jonas L...

usbrip

usbrip inherited from "USB Ripper", not "USB R.I.P." is a simple forensics tool with command line interface that lets you keep track of USB device artifacts i.e., USB event history on Linux machines. Table of Contents: Description Quick Start Showcase System Log Structure Dependencies deb pip...

CVE-2018-6606

CVE-2018-6606 Это завершает любой PID. Протестировано на Windows 10 64-bit, Flare VM. Требуются права администратора. Возможно, потребуются некоторые корректировки — см. resource.rc. Инструментарий Скачать:...

PT-2026-90059

In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cad pid" entry from pid table to kern reboot table cad pid is global, and kill cad pid is only used in the root namespace. However, due to pid table root permissions, a non-root user can unshare pid/user...

asminject

asminject.py asminject.py는 David Buchanan의 dlinject 프로젝트를 대폭 수정한 포크입니다. ptrace로 프로세스에 붙는 대신 /proc//mem에 접근하여 임의의 어셈블리또는 사전 컴파일된 바이너리 페이로드를 x86-64, x86, ARM32 Linux 프로세스에 직접 주입합니다. 신뢰된 프로세스 변조, 특정 사후 악용post-exploitation 시나리오, 프로세스 메모리에서 콘텐츠 복구, 일부 보안 통제 우회에 유용합니다. 컨테이너 외부에서도 호스트에서 root 접근 권한만 있다면...

Oracle Linux 8 : ELSA-2026-65832-0: / mrtg (ELSA-2026-658320)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-658320 advisory. 2.17.7-1.1 - Fix CVE-2026-72694: symlink-following chown in PID file handling Resolves: RHEL-236037 Tenable has extracted the preceding description block...

RLSA-2026:65832 Important: mrtg security update

The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...

mrtg security update

An update is available for mrtg. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Multi Router Traffic Grapher MRTG monitors the traffic load on network...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit CVE-2022-1227을 익스플로잇하는 스크립트입니다. 배경 Ubuntu 20.10이 권장됩니다. Podman TODO: 이 취약점의 원리 추가하기 Podman 설치 공식 문서의 지침을 따르세요: https://podman.io/getting-started/installationinstalling-on-linux Ubuntu 20.10의 경우 설치 명령어는 다음과 같아야 합니다: root@kitploit: sudo apt-get install podman=3.4.4+ds1-1ubuntu1...

Important: Red Hat Security Advisory: mrtg security update

An update for mrtg is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

docker_lightman_exploit

Эксплойт Docker Lightman Docker CVE-2022-37708. Этот эксплойт основан на том, как файловая система UNIX использует UID и GID для файлов, которые Docker разделяет между хостом, на котором работает Docker, и клиентом, работающим внутри Docker, а также на природе того, как работает владение...

RockyLinux 8 : mrtg (RLSA-2026:65832)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65832 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...

AlmaLinux 8 : mrtg (ALSA-2026:65832)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:65832 advisory. mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation CVE-2026-72694 Tenable has extracted the preceding...