Sploitus

Exploit for cfengine-CVE_2015_0235

CVE-2015-0235

kitploit · 2026-08-27

Exploit Code

MARKDOWN47 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-NICKANDERSON-CFENGINE-CVE_2015_0235
* CVE_2015_0235 Exploit di buffer overflow in gethostbyname*() in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability



Originariamente tratto dal post di Ben Bomgardner alla mailing list help-cfengine. https://groups.google.com/forum/#!topic/help-cfengine/tWjOlO19Mrw

  * Integrazione in masterfiles



** Scarica la policy ed estraila nella tua directory masterfiles

#+begin_src sh MASTERFILES=/home/nickanderson/CFEngine/masterfiles wget https://github.com/nickanderson/CVE_2015_0235/archive/master.tar.gz -O /tmp/CVE_2015_0235.tar.gz tar --directory "$MASTERFILES/services" -zxvf /tmp/CVE_2015_0235.tar.gz #+end_src

** L'exploit di test deve essere compilato.

#+begin_src sh cd $MASTERFILES/services/CVE_2015_2035/bins gcc GHOST.c -o GHOST_CVE-2015-0235 #+end_src

** Includi il percorso di def.cf in inputs

#+begin_src cfengine body common control { inputs => { # Reports @(cfengine_reports.inputs),

root@kitploit:~
    
    
                    # If you want to activate this policy from autorun,
                    # then it needs to be included before autorun
                    # inptus.
                    "services/CVE_2015_0235/def.cf",
                    
                    # autorun system
                    @(services_autorun.inputs),
        };
    

} #+end_src

  * Attivalo nella tua policy (con autorun)



Crea /masterfiles/services/autorun/CVE_2015_0235.cf con il seguente contenuto.

#+begin_src cfengine bundle agent CVE_2015_0235 { meta: # Make sure we get activated "tags" slist => { "autorun" };

root@kitploit:~