782 matches found
metasploitable-penetration-testing-lab
🔐 Metasploitable 2 渗透测试实验室 一个受控的网络安全实验室项目，演示在隔离虚拟环境中的漏洞发现、利用、后利用验证和防御缓解措施。 📌 项目概述 该项目模拟在受控虚拟实验室中进行的真实世界渗透测试活动。 目标是识别易受攻击系统上暴露的服务，检测关键漏洞，进行受控利用，验证系统被攻破，并实施缓解策略。 该项目展示了进攻性和防御性网络安全能力。 🏗 实验室环境 主机系统： Windows 11 虚拟化平台： VMware Workstation Pro 17 攻击机： Kali Linux 目标机： Metasploitable 2 网络模式： NAT（隔离内部网络） 子网...
cve-2022-31705
CVE-2022-31705 简介 https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html 在 Windows VMware Workstation 16.2.0 上测试，客户机操作系统为 Ubuntu Server 22 至少有一个 USB 设备连接到客户机 修改 ehci.c 代码中的 'qh-field4' 输入 'sudo ./run.sh' 编译并运行 PoC 示例 使用 'lsusb' 确定设备 ID，然后用设备 I...
vmware-exploitation
Explotación de VMware Una colección de enlaces relacionados con exploits de escape de VMware. Las pull requests son bienvenidas. Sigue a @andreyknvl en Twitter o a @[email protected] en Mastodon para recibir notificaciones de actualizaciones. Investigación 2024 "Encadenando N-days para...
network-security-lab
🔬 网络安全实验室 一个模拟真实攻击与防御场景的受控虚拟环境 📋 概述 本实验室在一个完全隔离的虚拟环境中模拟了真实的渗透测试和防御加固练习。它演示了完整的攻击性安全生命周期——从侦察到利用——以及能够缓解每种风险的防御控制措施。 关键成果： 通过利用已知后门，在无需凭据且无特殊工具的情况下，于60秒内获取了目标机器的完全 root 访问权限。 🏗 实验室环境 组件| 详情 ---|--- 虚拟机管理程序| VMware Workstation 网络| 仅主机模式 / NAT（完全隔离） 攻击机操作系统| Ubuntu 24 LTS 目标操作系统| Metasploitable 2...
PT-2026-85031
Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...
VMware Workstation 25H2, 26H1.x < 26H1u1 Multiple Vulnerabilities (VMSA-2026-0007)
The version of VMware Workstation installed on the remote host is 25H2, 26H1.x prior to 26H1u1. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 809...
PT-2026-85032
Broadcom has fixed Critical security vulnerabilities in VMware Workstation and Fusion. CVE-2026-59346 CVE-2026-59347 https://t.co/OY9uOeyBn8...
PT-2026-65829
Name of the Vulnerable Software and Affected Versions VMware ESX affected versions not specified Description An out-of-bounds write issue exists in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a virtual machine using the VMXNET3 adapter can exploi...
VMware Workstation 25.x < 26.0.0 Vulnerability (VMSA-2026-0006)
The version of VMware Workstation installed on the remote host is 25.x 25H2 prior to 26.0.0 26H1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
PT-2026-65833
Name of the Vulnerable Software and Affected Versions VMware vCenter versions prior to 9.1.0.0300 VMware vCenter versions prior to 9.0.2.0100 VMware vCenter versions prior to 8.0 U3k VMware vCenter versions prior to 8.0 U2f Description VMware vCenter contains a directory traversal flaw in the...
PT-2026-65832
Name of the Vulnerable Software and Affected Versions VMware vCenter affected versions not specified Description An authentication bypass exists in the VMware Directory Service. A malicious actor with network access to vCenter can exploit this flaw to bypass authentication mechanisms and gain...
VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Advisory ID: | VMSA-2026-0006.2 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...
VMware Workstation 17.x, 25H2 < 25H2u1 NULL Pointer Dereference (VMSA-2026-0002)
The version of VMware Workstation installed on the remote host is 17.x, 25H2.x prior to 25H2u1. It is, therefore, affected by a vulnerability: - A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error...
(Pwn2Own) VMware Workstation PVSCSI Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2026-22717
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...
EUVD-2026-9050
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...
EUVD-2026-9043
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...
CVE-2026-22717
Out-of-bound read vulnerability in VMware Workstation 25H1 and below on any platform allows an actor with non-administrative privileges on a guest VM to obtain limited information disclosure from the machine where VMware Workstation is installed...
CVE-2026-22715
VMWare Workstation and Fusion contain a logic flaw in the management of network packets. Known attack vectors: A malicious actor with administrative privileges on a Guest VM may be able to interrupt or intercept network connections of other Guest VM's. Resolution: To remediate CVE-2026-22715 plea...