CVE-2017-8890

CVE-2017-8890 相关文档： ubuntu 内核双机调试方法 CVE-2017-8890漏洞分析和利用-概览篇 CVE-2017-8890 漏洞分析 原理篇 CVE-2017-8890 漏洞利用（root ubuntu 16.04@kernel 4.10） CVE-2017-8890 漏洞利用 root nexus6p@kernel 3.10...

Make-and-Break

メイク・アンド・ブレイク 脆弱な仮想マシンを作成して悪用する 説明: Ubuntu 18.04.1 と Webmin 1.810 を実行するカスタム仮想マシンを構築しました。CVE-2019-15107 を使用して Linux システム管理インターフェースのバックドアを悪用します。 概念実証 --- Linux OS Ubuntu 18.04.1 がセキュリティ上の欠陥を含んでデプロイされ、攻撃者がシステムをルートレベルまで侵害できるようになります。 SSHサーバーのインストール Webmin 1.890 のインストール デフォルトでポート10000で動作するユーザー名 deathsta...

Ustealer

Ustealer Ubuntu スティーラー。ローカル PC の Ubuntu 情報を盗みます（USB キーと一緒に使うと便利） 必要条件 G++ sudo apt-get install g++ libsqlite3 sudo apt-get install libsqlite3-dev コンパイル Ustealer/ フォルダに移動し、makefile を実行してください make 使用方法 ./ustealer...

CVE-2023-32629-CVE-2023-2640---POC-Escalation

CVE-2023-32629 & CVE-2023-2640 : Privilege escalation Ubuntu Privilege Escalation bash one-liner using CVE-2023-32629 & CVE-2023-2640. TOTALLY STOLE IT FROM https://twitter.com/liadeliyahu/status/1684841527959273472?t=puhDAlZCy75s7UbdV-bFw&s=19 PLEASE RETWEET THE ORIGINAL SOURCE I just wanted to...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

sift

SIFT This is a metadata repository that is primarily used for discussiosn and issue tracking. cast -- installer cli saltstack -- states that actually do the work packer -- builds machine images using the above tools package-scripts -- builds certain packages hosted in SIFT PPA Supported Distros...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

naxsi

Project Status This is a project status update regarding Naxsi. As you may have noticed, the development of Naxsi has been stopped and the repository will be archived for historical reasons. This means that no new updates or bug fixes will be released for this version. However, if you wish to...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

spraykatz

Spraykatz Spray love around the world Index...

CrawlBox

CrawlBox | Easy way to brute-force web directory. Operating Systems Tested MacOSX Kali Linux Ubuntu 16.04 Usage root@kitploit: python crawlbox.py -h -v -w WORDLIST url positional arguments: root@kitploit: url specific target url, like domain.com optional arguments: root@kitploit: -h, --help show...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

backdoorppt

backdoorppt - 'Office spoof extensions tool' root@kitploit: Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt root@kitploit: Simple...

sudo-exploit

使用方法 注意：运行漏洞利用程序时，libnssX 目录必须存在于当前工作目录中 ubuntu 18.04 ubuntu 20.04...

CVE-2019-18634

CVE-2019-18634 这是CVE-2019-18634的一个基本复现，这是一个在sudo中启用pwfeedback时的权限提升漏洞。该内容是为NTU SC3010项目的一部分而创建，用于演示安全漏洞。 为了复现该漏洞，使用了Ubuntu 20.04的Docker镜像。然后安装了一个有漏洞的sudo版本，并配置为启用易受攻击的选项。 当时，Ubuntu默认未启用此选项，这有助于减轻影响，但该漏洞的严重性仍然使其获得了nvd-link严重性评分7.8。 pwfeedback是一个选项，当用户输入密码时会打印星号以提供视觉反馈。 运行 1. 使用develop.sh构建镜像。 2...

exist

EXIST EXternal Information aggregation System against cyber Threat ⚠️ This repository is unmaintained / archived. Security issues will not be fixed. EXIST is a web application for aggregating and analyzing CTI cyber threat intelligence. EXIST is written by the following software. Python 3 Django...

pyre-check

!WARNING This Repository Is Archived This repository is no longer maintained and has been archived. Type checking: Pyre has been replaced by Pyrefly, our next-generation Python typechecker and language server. Security analysis Pysa: Pysa has moved to its own repository at github.com/facebook/Pys...

Check-for-CVE-2023-32629-GameOver-lay

Comprobar CVE-2023-32629 GameOverlay Resumen del script: El script está diseñado para realizar comprobaciones de seguridad en un sistema Ubuntu para detectar vulnerabilidades relacionadas con los fallos GameOverlay. Verifica dos vulnerabilidades específicas, CVE-2023-2640 y CVE-2023-32629, que...

katoolin3

katoolin3 Katoolin3 brings all programs available in Kali Linux to Debian and Ubuntu. Description This program is a port of katoolin from LionSec to python3. Katoolin3 offers several improvements over katoolin: Up to date packages The old katoolin uses an outdated package list. Katoolin3 always...