8 ms·
Looks interesting for testing local server security. A useful feature to add might be a link to an explanation of the exploited vulnerability, and how to resolv
by Deukhoofd 6y ago
Looks interesting for testing local server security. A useful feature to add might be a link to an explanation of the exploited vulnerability, and how to resolve it.
- tyingq 6y agoSounds like a good suggestion. In the meantime... It looks like there's basically 2 types of local privilege exploits used. https://github.com/liamg/traitor/tree/main/pkg/exploits https://github.com/liamg/traitor/tree/main/pkg/exploits 1) Writeable Docker Socket: https://www.exploit-db.com/exploits/42356 https://www.exploit-db.com/exploits/42356 2) GTFObins: https://gtfobins.github.io/ https://gtfobins.github.io/