jondonas / linux-exploit-suggester-2 Goto Github PK

View Code? Open in Web Editor NEW

1.8K 1.8K 301.0 32 KB

Next-Generation Linux Kernel Exploit Suggester

License: GNU General Public License v2.0

Perl 100.00%

linux-exploit-suggester-2's People

Contributors

Stargazers

Watchers

Forkers

riverhac ranchoice exiahan zyayaa jbarcia ch4p34un0ir kyhvedn anon0ps bilportistivraboti exploit-inters royharoush dosglas dm2333 star-bob thor-vath fuckup1337 testimx62 snowdomain 5cr1p70633k njahrckstr aarandomhacker xiang-do jeremylambo raimundojimenez kaiserblack mjgrey 3453-315h amshar21 s1gh tai-euler techlord-rce attackgithub idkwim keystroke95 snrtherock fengjixuchui w00t3k jmfrouin huanghousec general-beck hacker-steroids xxm3 8l4nk kalmuthu liu0tufang ktaranov cyhook 0x6b7966 lilzhou modulexcite awesome-security kz9 k0uaz pwnfuzzsec p4yche fangdaomen redwifiteam nydubh3 hideonbeach savior325 asdfkj1 dattatraya-nirmal sacwtv hello-xbugs real-jing c0rpse blankm1 z3rg sunpeak xy-sec helinze linerg isecren whoamisysteminfo ellerbrock cloud-architecture unsecureio katipuzer0 wpczoe p0rietea pt-bizone ohyessir rahmiy dsb4 5bhuv4n35h leaptrutime bravery9 mytestlab6969 02bx sp4rta darck0de timmytr1ll startagain2016 blackf0x sectestt syafiqibrahimshah sakisakilily penneke brahmastra2016 etx77

linux-exploit-suggester-2's Issues

Greatz

Thx for you work @jondonas. Doing LES with perl is a good idea because it works on very old machines. So its a great alternative to mezt- LES that requires bash 4+ https://github.com/mzet-/linux-exploit-suggester/issues/53

Inventory notification

Your tool/software has been inventoried on Rawsec's CyberSecurity Inventory.

https://inventory.rawsec.ml/tools.html#Linux%20Exploit%20Suggester%202

What is Rawsec's CyberSecurity Inventory?

An inventory of tools and resources about CyberSecurity. This inventory aims to help people to find everything related to CyberSecurity.

Open source: Every information is available and up to date. If an information is missing or deprecated, you are invited to (help us).
Practical: Content is categorized and table formatted, allowing to search, browse, sort and filter.
Fast: Using static and client side technologies resulting in fast browsing.
Rich tables: search, sort, browse, filter, clear
Fancy informational popups
Badges / Shields
Static API
Twitter bot

More details about features here.

Note: the inventory is a FLOSS (Free, Libre and Open-Source Software) project.

Why?

Specialized websites: Some websites are referencing tools but additional information is not available or browsable. Make additional searches take time.
Curated lists: Curated lists are not very exhaustive, up to date or browsable and are very topic related.
Search engines: Search engines sometimes does find nothing, some tools or resources are too unknown or non-referenced. These is where crowdsourcing is better than robots.

Why should you care about being inventoried?

Mainly because this is giving visibility to your tool, more and more people are using the Rawsec's CyberSecurity Inventory, this helps them find what they need.

Badges

The badge shows to your community that your are inventoried. This also shows you care about your project and want it growing, that your tool is not an abandonware.

Feel free to claim your badge here: http://inventory.rawsec.ml/features.html#badges, it looks like that , but there are several styles available.

Want to thank us?

If you want to thank us, you can help make the project better known by tweeting about it! For example:

So what?

That's all, this message is just to notify you if you care.

Feature request

Consider adding in an option to select which exploit and have the script wget the source code down for you.

i.e.

Possible Exploits:

Select your exploit: 2

Obtaining code....
(background: the script performs wget https://www.exploit-db.com/raw/38390 -o 38390)

Just a thought.

-d comman not working why?

hi guys

./linux-exploit-suggester.pl -d

#Select exploits to download: a

result not download.

can you help me pls?

Wrong suggestion

On kernel 2.6.28-11-generic LES2 is suggesting:

[+] half_nelson
   Alt: econet    CVE-2010-3848
   Source: http://www.exploit-db.com/exploits/6851

But this exploit is for Linux kernel < 2.6.22 open/ftruncate local exploit

and of course 2.6.28 > 2.6.22

dead links

root@kali:# ./linux-exploit-suggester-2.pl -k 2.6.18 -d

...

Exploit Download
  (Download all: 'a' / Individually: '2,4,5' / Exit: ^c)
  Select exploits to download: a

  Can't download exploit for american-sign-language
  Downloading https://www.exploit-db.com/raw/14814 -> exploit_can_bcm
  Can't download exploit for do_pages_move
  Downloading https://www.exploit-db.com/raw/6851 -> exploit_ftrex
  Downloading https://www.exploit-db.com/raw/17787 -> exploit_half_nelson1
  Downloading https://www.exploit-db.com/raw/17787 -> exploit_half_nelson2
  Downloading https://www.exploit-db.com/raw/17787 -> exploit_half_nelson3
  Downloading https://www.exploit-db.com/raw/27297 -> exploit_msr
  Can't download exploit for pipe.c_32bit
  Downloading https://www.exploit-db.com/raw/15150 -> exploit_pktcdvd
  Downloading https://www.exploit-db.com/raw/12130 -> exploit_reiserfs
  Downloading https://www.exploit-db.com/raw/9435 -> exploit_sock_sendpage
  Downloading https://www.exploit-db.com/raw/9436 -> exploit_sock_sendpage2
  Can't download exploit for udp_sendmsg_32bit
  Downloading https://www.exploit-db.com/raw/15024 -> exploit_video4linux
  Downloading https://www.exploit-db.com/raw/5092 -> exploit_vmsplice1

won't run

pi@:~$ ./linux-exploit-suggester-2.pl
./linux-exploit-suggester-2.pl: command substitution: line 1: syntax error near unexpected token `newline'
./linux-exploit-suggester-2.pl: command substitution: line 1: `</span>uname -r |cut -d&quot;-&quot; -f1<span class="pl-pds">'
./linux-exploit-suggester-2.pl: line 1: payload:allShortcutsEnabled:false: command not found

pi@:~$ perl --version

This is perl 5, version 32,

wrong suggestion

run command ./linux-exploit-suggester-2.pl -k 4.4.0

get this

[2] dirty_cow
      CVE-2016-5195
      Source: http://www.exploit-db.com/exploits/40616

but the vul only exists in Linux Kernel 2.6.22 < 3.9 (x86/x64)