3270 matches found
CVE-2023-21817
CVE-2023-21817 - Comprobador de Vulnerabilidad de Elevación de Privilegios Local LPE en Kerberos de Windows Una prueba de concepto PoC minimalista en C++ / Comprobador de vulnerabilidad para CVE-2023-21817. Esta utilidad ayuda a investigadores de seguridad y administradores de sistemas a determin...
attack_range
Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...
cve-2022-31705
CVE-2022-31705 Introducción https://www.vmware.com/content/vmware/vmware-published-sites/us/security/advisories/VMSA-2022-0033.html.html Probado en Windows VMware Workstation 16.2.0, con sistema operativo invitado Ubuntu Server 22 Al menos un dispositivo USB debe estar conectado a la máquina...
securix
SécurixOS: 安全工作站基础操作系统 !NOTE 本项目处于 alpha 阶段，目前不提供任何支持。 目标 SécurixOS 是由 DINUM 开发的 NixOS 发行版，用于装备安全计算机，服务于系统管理、办公和开发，首先处理非保护级信息，后续可能处理限制传播级信息。 它构成了一种安全 PC 模型，旨在支持访问生产环境及其他关键用途，并根据所用配置提供可变的安全级别。 借助 NixOS，这种安全 PC 模型可针对不同使用场景重新实例化：多代理工作站、多级别工作站、仅内网工作站等，并支持不同团队和不同 VPN 根。 根据 ANSSI...
sift
SIFT 这是一个元数据仓库，主要用于讨论和问题追踪。 cast -- 安装 CLI saltstack -- 实际执行安装的状态文件 packer -- 使用上述工具构建机器镜像 package-scripts -- 构建托管在 SIFT PPA 中的某些软件包 支持的发行版 20.04 Ubuntu Focal 22.04 Ubuntu Jammy 安装 Cast 是 SIFT CLI 的替代品。虽然 SIFT CLI 应能继续使用，但它已于 2023 年 3 月 1 日正式弃用，之后不再保证可用。 您必须首先安装 CLI 工具，然后才能安装 SIFT。 sudo cast...
vmware-exploitation
Explotación de VMware Una colección de enlaces relacionados con exploits de escape de VMware. Las pull requests son bienvenidas. Sigue a @andreyknvl en Twitter o a @[email protected] en Mastodon para recibir notificaciones de actualizaciones. Investigación 2024 "Encadenando N-days para...
keimpx
Introduction keimpx is an open source tool, released under the Apache License 2.0. It can be used to quickly check for valid credentials across a network over SMB. Credentials can be: Combination of user / plain-text password. Combination of user / NTLM hash. Combination of user / NTLM logon...
dockernymous
向下滚动查看要求和说明 如果不遵循这些要求，它就无法正常工作 警告： Dockernymous 仍处于非常早期的开发阶段。仅用于教育目的。 如果你依赖强匿名性，请不要使用它！ 新闻 13.10.2018 我完全改变了脚本的整体功能逻辑，因此在可用性和稳定性方面有所改进。菜单的外观也得到了改进。 新增了以下功能： 1. 选项：保持容器运行并在之后恢复它们： 你现在可以选择在退出时保持容器运行。这当然会加快整个脚本的启动速度。 出于隐私原因，我让容器保持“自毁”特性，因此如果你手动停止它们或重启系统，它们仍会被清除。 2. 从菜单中（重新）启动 TOR 3. 从菜单中停止 TOR 享受吧！...
dockernymous
SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...
CVE-2026-59346-POC
CVE-2026-59346 — Desbordamiento de entero en TSO de VMXNET3 VMware Workstation / Fusion Prueba de concepto de un desbordamiento de entero de 32 bits en la ruta de segmentación TSO de la NIC virtual VMXNET3 en vmware-vmx, alcanzable desde una VM invitada. Este problema está parcheado. La PoC se...
network-security-lab
🔬 网络安全实验室 一个模拟真实攻击与防御场景的受控虚拟环境 📋 概述 本实验室在一个完全隔离的虚拟环境中模拟了真实的渗透测试和防御加固练习。它演示了完整的攻击性安全生命周期——从侦察到利用——以及能够缓解每种风险的防御控制措施。 关键成果： 通过利用已知后门，在无需凭据且无特殊工具的情况下，于60秒内获取了目标机器的完全 root 访问权限。 🏗 实验室环境 组件| 详情 ---|--- 虚拟机管理程序| VMware Workstation 网络| 仅主机模式 / NAT（完全隔离） 攻击机操作系统| Ubuntu 24 LTS 目标操作系统| Metasploitable 2...
CVE-2026-87114
A flaw in kube-compare allows a remote attacker to achieve arbitrary code execution on an operator's workstation. When processing a container:// reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of extracting data from a stopped container. This vulner...
CVE-2026-87114
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...
CVE-2026-87114: Inclusion of Functionality from Untrusted Control Sphere
A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint instead of merely extracting data from a stopped container. This allows a remote attacker to achieve arbitrary code execution on the operator'...
PT-2026-99931
Name of the Vulnerable Software and Affected Versions kube-compare affected versions not specified Description A flaw exists when processing a container:// reference path, where the tool incorrectly executes the entrypoint of an untrusted container image instead of extracting data from a stopped...
metasploitable-penetration-testing-lab
🔐 Laboratorio de Pruebas de Penetración Metasploitable 2 Un proyecto de laboratorio de ciberseguridad controlado que demuestra descubrimiento de vulnerabilidades, explotación, validación posterior a la explotación y mitigación defensiva dentro de un entorno virtual aislado. 📌 Resumen del Proyecto...
CVE-2026-89066 OS command injection in the task synthesis component in projen
Improper neutralization of special elements used in an OS command in the task synthesis component in projen before 0.103.0 might allow context-dependent attackers to execute arbitrary commands on a developer workstation or continuous integration runner via shell metacharacters in project...
CVE-2026-89178
WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...
CVE-2026-89178 Howyar｜WeenyGenius - Origin Validation Error
WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the...