uac

Unix-like Artifacts Collector UAC About • Documentation • Main Features • Supported Operating Systems • Usage • Contributing • Support • License 🔎 About UAC UAC Unix-like Artifacts Collector is a powerful and extensible incident response tool designed for forensic investigators, security analysts...

aircrack-ng

Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...

EQGRP

Browsable content of eqgrp-auction-file.tar.xz Original file: https://mega.nz/!zEAU1AQL!oWJ63n-D6lCuCQ4AY0Cv405hX8kn7MEsa1iLH5UjKU Passphrase: CrDj";Va.NdlnzB9M?@K2deB7mN as disclosed by the ShadowBrokers, source This summary is provided by the community: complaints/credits to jvoisin @ dustri.or...

exploits

exploits "You can't argue with a root shell." -- Felix "FX" Lindner A collection of my public exploits. See also https://www.exploit-db.com/?author=315 Exploits Linux raptorchown.c. Linux 2.6.x 2.6.7-rc3 CVE-2004-0497. Missing DAC controls in syschown on Linux. raptorprctl.c. Linux 2.6.x from...

lunar

LUNAR Lockdown UNix Auditing and Reporting Version Current version 16.6.1 Refer to lunar.sh and CHANGELOG.md for more up to date version information License CC BY-NC-SA: https://creativecommons.org/licenses/by-nc-sa/4.0/ Fund me here: https://ko-fi.com/richardatlateralblast NOTICE Run this code i...

raptor_infiltrate19

raptorinfiltrate19 "Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect." -- Jerry Gamblin This repository contains all materials related to my talk "A bug's life: story of a Solaris 0day" presented at INFILTRATE19 on May 2, 2019. Related...

privilege-escalation-breach

Security breach project - Privilege escalation The vulnerability is in Oracle Solaris, a product of Oracle Systems component: XScreenSaver. The supported version that is affected is 11. It's an easily exploitable vulnerability which allows low privileged attackers with logon to the infrastructure...

raptor_infiltrate20

raptorinfiltrate20 "Bugs are by far the largest and most successful class of entity." -- Encyclopedia of Animal Life This repository contains all materials related to my talk "The INFILTRATE effect: 6 bugs in 6 months" presented at INFILTRATE20 on January 26, 2021. Related links...

EvilSunCheck

EvilSun Vulnerability Checker CVE-2020-14871 This is a little Python script to detect the "EvilSun" vulnerability CVE-2020-14871 on Solaris systems. The vulnerability is a buffer overflow in the Pluggable Authentication Module PAM pamunixauth when handling keyboard-interactive authentication in...

CVE-2020-14871-Exploit

CVE 2020-14871 Solaris exploit This is a basic ROP based exploit for CVE 2020-14871. CVE 2020-14871 is a vulnerability in Sun Solaris systems. The actual vulnerability is a classic stack-based buffer overflow located in the PAM parseusername function. It can be reached by manipulating SSH client...

papers

Papers A handy collection of my public papers, all in one place. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db publication at https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An...

vulns

vulnerability reports HN Security's advisories. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Multiple vulnerabilities in Zyxel zysh...

vulns

Segnalazioni di vulnerabilità Avvisi di HN Security. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Diverse vulnerabilità in Solaris dtprintinfo e libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Diverse vulnerabilità in Zyxel zysh CVE-2022-26531...

Astra Linux – Vulnerability in Ansible

A flaw was discovered in the solariszone module from the Ansible Community modules. When setting the name of a zone on the Solaris host, the zone name is checked by listing the process using the ‘ps’ command on the remote machine. An attacker could exploit this flaw by creating a fake zone name a...

Standalone Veeam Agent for Unix Fails to Connect to Veeam Backup Server After Certificate Changed Twice

Challenge Veeam Agent for IBM AIX or Veeam Agent for Oracle Solaris operating in standalone mode is unable to connect to its configured Veeam Backup Server. Backup jobs fail to start, and attempts to resynchronize or edit the connection fail with the following error: Self-signed certificate This...

Oracle Solaris Critical Patch Update : jul2026_SRU11_3_36_36_0

The version of Solaris installed on the remote host is prior to 11.3.36.36.0. It is, therefore, affected by a vulnerability as referenced in the solaris11jul2026SRU11336360 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions that are...

Oracle Solaris Critical Patch Update : jul2026_SRU11_4_94_221_2

The version of Solaris installed on the remote host is prior to 11.4.94.221.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11jul2026SRU114942212 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystems. The supported...

CVE-2026-16606

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution pre-auth RCE on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE...

CVE-2026-16607

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for local privilege escalation to root of an already authenticated user on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and...

CVE-2026-16606 Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris

A vulnerability in Fujitsu Software Linux openFT and Fujitsu Software Oracle Solaris openFT before version 12.1D00 allows for unauthenticated remote code execution pre-auth RCE on GNU/Linux or Oracle Solaris. The Fsas Technologies PSIRT obtained that intelligence internally and covers the CVE...