ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

DFShell

root@kitploit: ██████╗ ███████╗███████╗██╗ ██╗███████╗██╗ ██╗ ██╔══██╗██╔════╝██╔════╝██║ ██║██╔════╝██║ ██║ ██║ ██║█████╗ ███████╗███████║█████╗ ██║ ██║ ██║ ██║██╔══╝ ╚════██║██╔══██║██╔══╝ ██║ ██║ ██████╔╝██║ ███████║██║ ██║███████╗███████╗███████╗ ╚═════╝ ╚═╝ ╚══════╝╚═╝...

SSHPry2.0

SSHPry2.0 This is a second release of SSHPry tool, with multiple features added. Control of target's TTY Built-In Keylogger Console-Level phishing Record & Replay previous sessions Demo: https://youtu.be/2gfnBvu1u34 Blogpost: http://www.korznikov.com/2017/09/sshpry-v2-spy-control-ssh-connected.ht...

arsenal

Arsenal Arsenal is just a quick inventory, reminder and launcher for pentest commands. This project written by pentesters for pentesters simplify the use of all the hard-to-remember commands In arsenal you can search for a command, select one and it's prefilled directly in your terminal. This...

Girsh

Girsh Golang 交互式反向 Shell 谁没有厌倦过手动输入那几行代码来将反向 Shell 升级为完整的交互式反向 Shell（tty spawn、stty size ...、stty raw -echo）或者输入使用 ConPTY 的命令呢？ 描述 使用 Girsh，只需运行它，它就会检测操作系统并执行正确的命令，将其升级为完整的交互式反向 Shell。 对于 Linux： 获取终端大小 使用 python2.7、python3 和 python 生成 tty 将终端设置为 raw 模式 对于 Windows： 绕过 AMSI 并使用 ConPTY 生成交互式终端 监听以获取...

CVE-2017-1000367

CVE-2017-1000367 我们在 Sudo 的 getprocessttyname 函数中发现了一个针对 Linux 的漏洞： 该函数会打开 “/proc/pid/stat” man proc 并读取 tty 的设备号（字段 7，即 ttynr）。然而，这些字段是以空格分隔的，而字段 2（comm，命令的文件名）可以包含空格（CVE-2017-1000367）。 例如，如果我们通过符号链接 “./ 1 “ 来执行 Sudo，getprocessttyname 会调用 sudottynamedev 在内置的 searchdevs 中搜索不存在的 tty 设备号 “1”。...

postshell

PostShell PostShell 是一个后渗透 shell，同时包含绑定 shell 和反向连接 shell。它创建一个完全交互式的 TTY，允许作业控制。生成的 stub 大小约为 14kb，可在任何类 Unix 系统上编译。 截图 连接启动后，横幅及与 shell 的交互界面。 为什么不使用传统的反向连接/绑定 Shell？ PostShell 使后渗透攻击更加容易，攻击者不再依赖 Python 和 Perl 等依赖项。它还同时集成了反向连接和绑定 shell，这意味着如果目标不允许出站连接，操作员可以简单地启动一个绑定 shell 并远程连接到该机器。此外，PostShell...

postshell

PostShell PostShell is a post-exploitation shell that includes both a bind and a back connect shell. It creates a fully interactive TTY which allows for job control. The stub size is around 14kb and can be compiled on any Unix like system. ScreenShots Banner and interaction with shell after a...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

FShell

FShell Descripción FShell es mi implementación de un Forward Shell. Está diseñado para obtener una tty interactiva usando ejecución remota de código a través de un protocolo sin estado p. ej. HTTP. ¿Por qué debería usar un forward shell? El servidor remoto no puede acceder a internet, no hay...

honssh

!!! This project is no longer maintained. !!! HonSSH https://github.com/tnich/honssh Copyright C 2016 Thomas Nicholson HonSSH is designed to be used in conjunction with a high interaction honeypot. HonSSH sits between the attacker and the honey pot and creates two separate SSH conncetions. Read t...

pupy

Pupy Simple Installation root@kitploit: pip3 install pipx pipx ensurepath pipx install git+https://github.com/n1nj4sec/pupy@nextgen pupysh If you want more detailed informationRefer to the wiki Development Install root@kitploit: git clone https://github.com/n1nj4sec/pupy cd pupy git checkout...

DEBIAN-CVE-2026-80923

In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on ttyregisterdriver failure If ttyregisterdriver fails, it drops the reference, but fails to set the global dbcttydriver to NULL, causing the unregister to be called again when module exits. On modul...

The vulnerability in the `qcom_geni_serial_handle_tx_dma()` function of the `drivers/tty/serial/qcom_geni_serial.c` driver of the TTY console driver in the Linux kernel’s serial port allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcomgeniserialhandletxdma function in the drivers/tty/serial/qcomgeniserial.c driver of the TTY console driver in the Linux kernel’s serial port is related to a violation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the...

CVE-2013-6282

构建： 下载 Android NDK，例如： https://dl.google.com/android/repository/android-ndk-r10e-linux-x8664.zip （我使用了 android-ndk-10d） 将其解压并安装，确保 ndk-build 在你的 PATH 中 root@kitploit: $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPPLATFORM=android-16 APPABI=armeabi make1: Entering directory...

CVE-2026-58093

CVE-2026-58093 is a use-after-free vulnerability in the FreeBSD kernel tty subsystem , specifically in the TIOCSCTTY ioctl handler. The handler drops the tty lock to acquire the process tree lock but fails to revalidate the terminal's state upon reacquiring the tty lock, allowing it to link a con...

EUVD-2026-66250

The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling process' session. An...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098806)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098806 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix deadlock and link starvation in outgoing data path The current implementation queu...

FreeBSD-SA-26:62.tty

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:62.tty Security Advisory The FreeBSD Project Topic: Kernel use-after-free via tty ioctls Category: core Module: tty Announced: 2026-08-25 Credits: tsune of...

FreeBSD -- Kernel use-after-free via tty ioctls

Problem Description: The TIOCSCTTY ioctl handler drops the tty lock in order to acquire the process tree lock. After reacquiring the tty lock, the handler did not revalidate the state of the terminal, and could proceed to link a terminal that was concurrently being destroyed to the calling proces...