attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

CVE-2024-21107

CVE-2024-21107 Oracle VM VirtualBox for Windows prior to 7.0.16 - Elevation of Privileges Description: A vulnerability has been identified in Oracle VM VirtualBox on Windows where the setup fails to set proper access rights for its installation folder if a non-default installation path was chosen...

skf-flask

OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...

virtualbox-cve-2018-2844

virtualbox-cve-2018-2844...

CVE-2020-14293

CVE-2020-14293 This vulnerablity was discovered and disclosed by me. This repository will hold the advisory, vulnerable software and the exploits. This repository is only for educational purposes. Links Advisory SYSS-2020-025 Detailed writeup SySS Blog entry Exploit on Exploit-DB Vendor notice...

metta

Metta Metta is an information security preparedness tool. This project uses Redis/Celery, python, and vagrant with virtualbox to do adversarial simulation. This allows you to test mostly your host based instrumentation but may also allow you to test any network based detection and controls...

CVE-2024-21111

These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...

vbox-guestctrl-copyfrom-dotdot

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-guestctrl-copyfrom-dotdot vbox-guestctrl-copyfrom-dotdot Class: File write Reach: Local guest confused-deputy Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle Host IGuestSession::directoryCopyFromGuest /...

specterops-k8s-red-teamers-libvirt-patch

SpecterOps Kubernetes for Red Teamers Libvirt Patch An unofficial libvirt and QEMU/KVM patch for the free SpecterOps Kubernetes for Red Teamers course. The original network addresses, Kubernetes topology, Mythic callbacks and lab behaviour remain unchanged. Why? Because running VirtualBox on Linu...

CyberSec2026

Victim installation Start your VM in VirtualBox 1. Log in with: username: osboxes password: osboxes.org 2. Open a terminal 3. Test if you have a working internet connection. ping 8.8.8.8 If your ping is not successful, check if your NAT interface is enabled. 4. Update your OS sudo apt-get update ...

vbox-ovf-href-dest-escape

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · vbox-ovf-href-dest-escape vbox-ovf-href-dest-escape Class: File write Reach: Local host UI:R Oracle VM VirtualBox OSS 7.2.20 f2792cf44 - Oracle A host user who imports a hostile OVF/OVA writes disk-image bytes outside...

cuckooautoinstall

About CuckooAutoinstall Cuckoo Sandbox . auto install script What is Cuckoo Sandbox? Cuckoo Sandbox is a malware analysis system. What does that mean? It means that you can throw any suspicious file at it and get a report with details about the file's behavior inside an isolated environment. We...

VirtualBox_CVE-2019-2525-CVE-2019-2548

VirtualBox 3D PoCs & exploits Author : @niklasb Overview article. License Exploits See the subdirectories other than lib. Debug build For Arch Linux, you can use the provided PKGBUILD in archpkg to get a debug version of 5.2.18, with the 3D security fixes from July 2018 reverted. Library...

kernel-debug-lab-for-virtual-box

How to set up a VirtualBox lab to debug Kernel Driver with Windbg We consider here that on Computer A windbg is already installed and on Computer B Visual Studio, the SDK and WDK are installed. 1. Open the Host network Manager to create or set up a new Virtual Box Host-Only Ethernet adapter 2...

Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

MassCyberCenter-Mentorship-Project-

MassCyberCenter-Mentorship-Project- Overview This repository documents my journey and deliverables during the MassCyber Center mentorship program. This mentorship program tasked us with completing a cybersecurity project and then presenting it at a showcase event attended by cybersecurity...

Sauercloude

Sauercloude 0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020/2021 CVE-2021-2119...

virtualbox_e1000_0day

Why I like VirtualBox and it has nothing to do with why I publish a 0day vulnerability. The reason is my disagreement with contemporary state of infosec, especially of security research and bug bounty: 1. Wait half a year until a vulnerability is patched is considered fine. 2. In the bug bounty...

vbox_cve_2017_10235

CVE-2017-10235: VirtualBox E1000 device buffer overflow Introduction The following document details a bug found in VirtualBox v5.1.22 now fixed in v5.1.24, in the guest device emulation component DevE1000 Intel 82540EM Ethernet Controller Emulation, in the function e1kFallbackAddToFrame, which...

linux_screenshot_xwindows

Intro The goal of this volatility plugin is to extract a screenshot of all open X windows from a memory dump. Previous work The volatility plugin linuxxwindows realised by Adam Bridge https://github.com/bridgeythegeek/linuxxwindows extracts various metadata from the window objects registered to X...