PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 白帽学校第3期13班白承勋@shun1403 https://github.com/shun1403/PIL-CVE-2017-8291.git 环境：Ubuntu Linux 环境配置 通过 sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin 升级到V2 如果运行出现错误，使用以下命令重新配置docker sudo apt remove docker docker-engine docker.io...

CVE-2017-16995

Descripción de la vulnerabilidad Ubuntu es un sistema operativo GNU/Linux de código abierto orientado principalmente a aplicaciones de escritorio, basado en Debian GNU/Linux. Recientemente, un hacker de sombrero blanco reveló que la última versión de Ubuntu Ubuntu 16.04 contiene una vulnerabilida...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen...

scannerl

Scannerl Scannerl is a modular distributed fingerprinting engine implemented by Kudelski Security. Scannerl can fingerprint thousands of targets on a single host, but can just as easily be distributed across multiple hosts. Scannerl is to fingerprinting what zmap is to port scanning. Scannerl wor...

CVE-2026-31431

CVE-2026-31431 Resumen Este repositorio se crea únicamente con fines educativos y de investigación. Está pensado para ayudar a comprender el comportamiento, el impacto y las consideraciones de seguridad relacionadas con CVE-2026-31431 en un entorno de laboratorio controlado. El contenido de este...

seeker

Available in Concept behind Seeker is simple, just like we host phishing pages to get credentials why not host a fake page that requests your location like many popular location based websites. Read more on thewhiteh4t's Blog .Seeker Hosts a fake website which asks for Location Permission and if...

Ubuntu-CVE-2026-3888-patcher

🛡️ Script de Remediación CVE-2026-3888 Herramienta de Aviso de Seguridad de Many Hat Group Descripción General Este script ha sido desarrollado por Many Hat Group para identificar y remediar rápidamente sistemas afectados por CVE-2026-3888 en entornos Ubuntu. Está diseñado para su uso en flotas...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

CVE-2016-9079

CVE-2016-9079 Una demo de exploit de CVE-2016-9079 en Ubuntu x64...

CVE-2021-3156

CVE-2021-3156 nssloadlibrary versión root@kitploit: No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04 LTS Release: 20.04 Codename: focal GNU C Library Ubuntu GLIBC 2.31-0ubuntu9 stable release version 2.31. Sudo 版本 1.8.31 Sudoers 策略插件版本 1.8.31 Sudoers 文件语法版本 46 Sudoer...

attifyos

AttifyOS v3.0 AttifyOS 是一个旨在帮助你执行物联网 IoT 设备安全评估和渗透测试的发行版。它通过提供一个预配置环境并加载所有必要工具，为你节省大量时间。新版本基于 Ubuntu 18.04 64 位系统——这也意味着你将收到截至 2023 年 4 月的更新。 免责声明 ——请确保你只对已获得适当授权的目标进行测试。你需自行承担使用本工具的一切责任。 下载链接 Google Drive - https://drive.google.com/drive/folders/1C5BKrpoCtxqZODbF0A-tt0UNjx-UmKt3 包含的工具 Arduino...

routersploit

RouterSploit - Exploitation Framework for Embedded Devices Community Join community on Embedded Exploitation Discord. Description The RouterSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aid penetration testing...

CVE-2023-4911

CVE-2023-4911 这是一个针对 Looney Tunables Linux 权限提升漏洞的概念验证（PoC）。该 PoC 基于 此 PoC。非常感谢 leesh3288。这里 可以找到非常详细的分析文章，这里 可以观看 IppSec 制作的超酷视频。 使用方法 检查是否存在漏洞 root@kitploit: env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/su --help 值得一提的是，存在漏洞的 glibc 版本（包括此版本）为...

lxd-group-privesc-report

LXD Root Local Privilege Escalation to root via default lxd group membership and the lxd-installer package on Ubuntu. 演示运行在 AWS EC2 Ubuntu Server 26.04 上 该漏洞在于 Ubuntu Server 26.04 的默认安装会静默地将主用户加入 lxd 组，根据 LXD 的信任模型，该组等同于免密码 root，同时却将其呈现为无害的“容器管理”能力。此外，该非特权用户可以自行安装和配置 LXD，无需任何额外权限，因此无需触及 sudo...

ProcDump-for-Linux

ProcDump ProcDump is a Linux and Mac reimagining of the classic ProcDump tool from the Sysinternals suite of tools for Windows. ProcDump provides a convenient way for Linux and Mac developers to create core dumps of their application based on performance triggers. ProcDump for Linux and Mac is pa...

PoC-ubuntutouch-pin-privesc

UPDATE 09.09.2022 I got new CVE for this vulnerability: CVE-2022-40297. Proof of Concept: Privilege escalation in Ubuntu Touch 16.04 - by Passcode Bruteforce Ubuntu Touch allows you to "protect" devices with a 4-digit passcode. Such a code was set in a demonstration device. The problem is that th...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verificado en ubuntu 18.04, ubuntu 20.04, ubuntu 22.04, kali 2024, kali 2025, kali 2026 root@kitploit: gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Verificado en ubuntu 25.04 arm64 root@kitploit: gcc -o exploit exploitaarch64.c -lz && chmod +x exploit &...

CVE-2024-47176

CVE-2024-47176 — CUPS RCE 漏洞利用实验环境 网络安全与虚拟化 2025-2026 用于演示 CVE-2024-47176（基于 cups-browsed 的 CUPS 远程代码执行）的隔离实验环境。 设置 所需 VDI Ubuntu 22.04 （非 24.04！）— https://www.osboxes.org/ubuntu/ → VirtualBox（VDI） Kali Linux 2026.1 — https://cdimage.kali.org/kali-2026.1/kali-linux-2026.1-virtualbox-amd64.7z 解压两个...

OverlayFS---CVE-2021-3493

摘要 了解 OverlayFS 中的一个漏洞如何允许 Ubuntu 下的本地用户获得 root 权限。 漏洞摘要 Linux 内核中 overlayfs 文件系统的一个 Ubuntu 特定问题，它没有正确验证文件系统能力在用户命名空间方面的应用。由于 Ubuntu 中允许非特权 overlayfs 挂载的补丁，本地攻击者可以利用此漏洞提升权限。 CVE-2021-3493 致谢 一位独立安全研究员已向 SSD 安全披露计划报告了此漏洞。 受影响的版本 Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubunt...