CVE-2018-4416-exploit

Prefacio :PROPERTIES: :CUSTOMID: preface :END: De acuerdo, la seguridad binaria no solo se trata de /heap/ y /stack/, todavía tenemos mucho por descubrir más allá de los desafíos CTF habituales. El navegador, la máquina virtual y el kernel juegan un papel importante en la seguridad binaria. Y...

cgPwn

cgPwn - Cyber Grand Pwnage Box 这是一个专为硬件破解、逆向工程和战争游戏定制的 Ubuntu 虚拟机。 包含的工具 Pwndbg Pwntools Binwalk Radare2 Capstone, Unicorn 和 Keystone 引擎 Qira Timeless Debugger AFL Valgrind, VGdb ROPGadget, XRop, Ropper, rp++ Intel PIN Angr z3 frida 编译器工具：CLANG, LLVM, GDBMultiarch, GDBArm 实用工具：htop, lynx, socat,...

Penetration-Test

Penetration-Test Informe completo de prueba de penetración contra IP VM Ubuntu. Cadena de ataque: enumeración de directorios → descubrimiento de archivos de respaldo → cracking de contraseñas → subida de archivos CMS → reverse shell → escalada de privilegios del kernel Dirty Pipe, CVE-2022-0847...

ubuntu-privesc-lab

ubuntu-privesc-lab Flujo de trabajo completo de pruebas de penetración: fuerza bruta de credenciales, acceso SSH y escalada de privilegios CVE-2021-4034 VISIÓN GENERAL Este proyecto demuestra un flujo de trabajo completo de pruebas de penetración contra una máquina virtual Ubuntu vulnerable. La...

Ubuntu 18.04.2 VMs can fail to boot on Citrix Hypervisor (formerly XenServer)

When creating an Ubuntu 18.04.2 or18.04.3VM or updating an existing VM to Ubuntu 18.04.2 or 18.04.3, your VM can fail to boot. The console shows the boot sequence hung at the point "Starting Tool to automatically collect and submit kernel crash signatures..." If you switch the console to shell mo...

Linux - Broken uid/gid Mapping for Nested User Namespaces

commit 6397fac4915a "userns: bump idmap limits to 340" increases the number of possible uid/gid mappings that a namespace can have from 5 to 340. This is implemented by switching to a different data structure if the number of mappings exceeds 5: Instead of linear search over an unsorted array of...

CVE-2008-5103

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

CVE-2008-5103

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...

CVE-2008-5103: Undefined Security Weakness

The 1 python-vm-builder and 2 ubuntu-vm-builder implementations in VMBuilder 0.9 in Ubuntu 8.10 omit the -e option when invoking chpasswd with a root:! argument, which configures the root account with a cleartext password of ! exclamation point and allows attackers to bypass intended login...