Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2015-0235 PoC — GNU glibc 基于堆的缓冲区错误漏洞

Source
https://github.com/chayim/GHOSTCHECK-cve-2015-0235
Associated Vulnerability
Title:GNU glibc 基于堆的缓冲区错误漏洞 (CVE-2015-0235)
Description:Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."
Description
A check for GHOST; cve-2015-0235
Readme
# Ghostcheck

This is a really, really light fabric script - for checking the impact of CVE-2015-0235 (GHOST) on a running linux host. Forked into Lyrical after writing.

Python 2.6 and higher recommended, and Fabric is needed.

Usage:

fab -f ghostcheck.py -u _sshusername_ -p _sshpassword_ -H _ip_,_ip2_,_ipN_ go

fab -f ghostcheck.py -u _sshusername_ -i _/path/to/ssh/key_ -H _ip_,_ip2_,_ipN_ go
File Snapshot

 [4.0K]  /data/pocs/4ecbd39f16c3b12c0401e2a633baa6e0fd562c42
├── [1.8K]  ghostcheck.py
└── [ 399]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →