ZLblog

Detecting ATM skimmer

Zeta Lockhart 7:12 AM Leave a Comment Read More

Linux exploit suggester

https://github.com/mzet-/linux-exploit-suggester

Supported vulnerability:
CVE-2004-1235
CVE-2004-0077
CVE-2006-2451
CVE-2006-3626
CVE-2008-0600
CVE-2008-4210
CVE-2009-2692
CVE-2009-1895
CVE-2009-2698
CVE-2009-3547
CVE-2010-3301
CVE-2010-1146
CVE-2010-2959
CVE-2010-3904
CVE-2010-3848
CVE-2010-3850
CVE-2010-4073
CVE-2010-4347
CVE-2010-3437
CVE-2010-3081
CVE-2012-0056
CVE-2010-3849
CVE-2010-3850
CVE-2013-1858
CVE-2013-2094
CVE-2013-0268
CVE-2013-1959
CVE-2013-1979
CVE-2014-0038
CVE-2014-0196
CVE-2014-2851
CVE-2014-4014
CVE-2014-4699
CVE-2014-4943
CVE-2014-5207
CVE-2015-9322
CVE-2015-3290
CVE-2015-1328
CVE-2015-8660
CVE-2016-0728
CVE-2016-2384
CVE-2016-5195
CVE-2016-8655

#####Userspace#######
CVE-2004-0186
CVE-2009-1185
CVE-2010-0832
CVE-2011-1485
CVE-2012-0809
CVE-2014-0476
CVE-2014-5119
CVE-2015-1862
CVE-2015-3315
CVE-2015-1318
CVE-2015-3202
CVE-2015-1815
CVE-2015-3246
CVE-2015-6565
CVE-2016-1240
CVE-2016-1247
CVE-2016-1531
CVE-2016-4989
CVE-2016-5425
CVE-2016-6662
CVE-2016-6663
CVE-2016-6664
CVE-2016-9566

Zeta Lockhart 6:36 AM 3 comments Read More

Dirty COW (CVE-2016-5195)

https://dirtycow.ninja/
Dirty COW (CVE-2016-5195) is a privilege escalation vulnerability in the Linux Kernel
The bug has existed since around 2.6.22 (released in 2007) and was fixed on Oct 18, 2016
If you have any device running a Linux kernel higher than 2.6.22, there’s a good chance that you are vulnerable. The same goes for all versions of Android whether they come from Samsung, Google, Cyanogen, MIUI, or other vendors because they have not yet issued security updates.
In order to exploit this vulnerability, the attacker needs to run code in the affected device, which in Android’s case can be done via the Android Debug Bridge (ADB) over USB or by installing an app that makes use of the exploit.