rootOS

rootOS Intenta usar varios CVEs para obtener acceso sudo o root. Todos los exploits tienen el objetivo final de agregar ALL ALL=ALL NOPASSWD: ALL a /etc/sudoers permitiendo que cualquier usuario ejecute comandos sudo. Ejecutar root@kitploit: python root.py Exploits Nombre| CVE| Fecha| Enlaces...

CVE-2023-22809

CVE-2023-22809 Analysis & Exploit Información básica ID de vulnerabilidad: CVE-2023-22809 Nivel de vulnerabilidad: Alto Puntuación de vulnerabilidad: 7.8 puntos Versiones afectadas: sudo 1.8.0-sudo 1.9.12p1sudo=1.8.0 or sudo =1.9.12p1 Efecto del ataque: Escalada de privilegios local Método de...

Malicious code in @redhat-cloud-services/remediations-client (npm)

Part of the "Mini Shai-Hulud" supply chain worm campaign that compromised the GitHub Actions OIDC trusted publisher shared by Red Hat Cloud Services npm packages. The attacker injected a preinstall hook into this and 31 other packages in the @redhat-cloud-services scope. The hook delivers a...

UBUNTU-CVE-2020-8933

A vulnerability in Google Cloud Platform's guest-oslogin versions between 20190304 and 20200507 allows a user that is only granted the role "roles/compute.osLogin" to escalate privileges to root. Using the membership to the "lxd" group, an attacker can attach host devices and filesystems. Within ...