CVE-2021-4034

CVE-2021-4034 Exploit for the pwnkit vulnerability from the Qualys team. This exploit assumes that gcc is present on the target machine. $ id uid=1001ayrx gid=1002ayrx groups=1002ayrx,27sudo $ ./setup.sh Run the following command in one bash session: while :; do mv "GCONVPATH=./value"...

CVE-2021-33909

Sequoia CVE-2021-33909 Building gcc exploit.c -o exploit Running chmod +x exploit ./exploit One-Liner gcc exploit.c -o exploit;chmod +x exploit;./exploit Credits...

wireshark-forensics-plugin

wireshark-forensics-plugin Wireshark is the most widely used network traffic analyzer. It is an important tool for both live traffic analysis & forensic analysis for forensic/malware analysts. Even though Wireshark provides incredibly powerful functionalities for protocol parsing & filtering, it...

CVE-2021-3156

Project Title Exploit generator for CVE-2021-3156 sudo Installation 1. Install dependencies ./install.sh 2. Run exploit generator: ./run.sh 3. If the system's sudo version is vulnerable, an exploit is generated for the installed version 4. The exploit is generated in exploit.c and the binary...

RAWR

RAWR - Rapid Assessment of Web Resources by: al14s - Romans 5:6-8 Twitter: @RapidWebEnum | Freenode: rawr-project Wiki - Home | Installation | Usage | Community | FAQ RAWR is a python tool that is designed to make the process of web enumeration easy and efficient by providing pertinent informatio...

CVE-2021-4034

CVE-2021-4034 Local privilege escalation via pkexec YouTube video Watch the ✨ YouTube Video Run locally make all && ./pwnkit && make clean Run in docker Build the docker image docker build -t pwnkit . Run the exploit docker run -it pwnkit bash make all && ./pwnkit && make clean Detect using...

CVE-2021-3156-PoC

CVE-2021-3156 PoC Introduction This is an exploit for the CVE-2021-3156 sudo vulnerability dubbed Baron Samedit by Qualys. Usage build: $ make list targets: $ ./sudo-hax-me-a-sandwich run: $ ./sudo-hax-me-a-sandwich Contributing Send sensible PR's, I might merge. Some ideas: More targets Target...

pacbot

Introduction Policy as Code Bot PacBot is a platform for continuous compliance monitoring, compliance reporting and security automation for the cloud. In PacBot, security and compliance policies are implemented as code. All resources discovered by PacBot are evaluated against these policies to...

seccubus

About Seccubus Seccubus automates regular vulnerability scans with various tools and aids security people in the fast analysis of its output, both on the first scan and on repeated scans. On repeated scan delta reporting ensures that findings only need to be judged when they first appear in the...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

CVE-2020-7247

CVE 2020-7247 PoC exploit for OpenSMTPD 6.4.0...

PIE-Stack-Clash-CVE-2017-1000253

PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each entry to path to...

CVE-2021-4034

Information Exploit Title: Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Date: 01/25/2022 Exploit Author: Qualys Research Team Tested on: ubuntu 20.04.1 LTS CVE ID: CVE-2021-27928 How to Exploit Test Environment： Step 1：build the expFrom https://github.com/berdav/CVE-2021-4034 make...

cve-2018-14634

cve-2018-14634 This is a exploit published for researchers discovered by cloud-based security and compliance solution provider Qualys Affect kernel versions 2.6.x, 3.10.x and 4.14.x To successfully exploit this vulnerability, attackers need to have access to the targeted system and run their...

CVE-2022-2586-LPE

CVE-2022-2586-LPE LPE N-day Exploit for CVE-2022-2586: Linux kernel nftobject UAF gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread Author: Alejandro Guerrero [email protected] Copyright C 2022 Qualys, Inc...

CVE-2021-4034

CVE-2021-4034 self contained bash script, just run and pwn! with reference to Qualys' blog post https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

ghost-checker

ghost-checker Test wether you're exposed to ghost CVE-2015-0235. All kudos go to Qualys Security Usage /tmp/ghost-checker master$ make cc -o ghost ghost.c /tmp/ghost-checker master$ ./ghost not vulnerable /tmp/ghost-checker master$ make clean rm ghost Credits Qualys Security Team...

CVE-2024-48990-POC

CVE-2024-48990-POC Simple poc for CVE-2024-48990 privilege escalation vulnerability with needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Overview This was desgined while working through the HackTheBox challenge, 'Conversor'. Slight modifications will be made to generali...

pwnkit

CVE-2021-4034 Introduction This is an exploit for the CVE-2021-4034 vulnerability, aka pwnkit, which was discovered by Qualys. Usage Compilation $ make or $ gcc -o pwnkit.so -fPIC -shared pwnkit.c -Wl,-e,main Testing $ make test or $ ./pwnkit.so...

PoC_CVE-2019-10149--rce

About Remote Command Execution into shell from a vulnerable exim service. Vulnerable versions go from 4.87 to 4.91 inclusive. Check https://nvd.nist.gov/vuln/detail/cve-2019-10149. The following script is based on Qualys PoC. Check...