Nix-Auditor

Nix Auditor 让CIS审计更简单（RHEL、CentOS） 用法： 1. 使其可执行...例如 chmod +x 文件名 2. 执行它。 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0： 变更日志 - 感谢 Metale 在第210-213行添加了颜色变量 BLUE, RED, NC（无颜色）和 GREEN。在第1171和1173行将颜色变量应用于函数 funcwrapper 中的“passed”和“failed”结果。 ☕ 支持我...

Fennec

Fennec 🦊 fennec 是一个使用 Rust 编写的工件收集工具，用于在基于 nix 的系统上进行应急响应。fennec 允许你编写一个配置文件，其中包含如何收集工件。 特性 🌟 🦀 单个静态编译的二进制文件 🔬 执行任意 osquery SQL 查询 💻 执行系统命令并解析其输出 📚 使用正则表达式解析任何文本文件 🧰 能够收集系统日志和文件 🧱 以结构化方式返回数据 🃏 支持多种输出格式（JSONL、CSV 和 KJSON） 🤸‍♀️ 灵活的配置文件 💾 直接写入 ZIP 文件以节省空间 ⚡ 速度非常快！ 测试 🧪 操作系统详情| 架构| 成功?| 详情...

nixos-config

Configuración de NixOS de Lan Tian Este repositorio contiene los archivos de configuración para todos mis sistemas NixOS. Características Sistema completo root-on-tmpfs, usando impermanence Nftables en lugar de iptables Gestión de secretos con sops-nix Emulación en modo usuario de QEMU para la...

Hwacha

Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha是一个用于在Nix系统中快速执行载荷的工具。轻松收集工件或在已获取凭据的整个子网系统上执行Shellcode。 root@kitploit: $python hwacha.py &&&& && && && &&&&&&&&&&&& && && && Created by Esteban Rodriguez /\ &&&&&& && &&&&&&&&&& && Web: https://www.n00py.i...

rootend

rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |...

rootend

rootend rootend 是一个基于 Python 的 nix 枚举与自动权限提升工具。 有关我们工具的完整列表，请访问我们的网站https://www.twelvesec.com/ 编写者： nickvourd twitter maldevel twitter servo 用法 root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |\ /\ / / \ /\ \ || // \ // \ /\ \ / / / / / rootend v.2.0.3 -...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

heimdall_webserver

注意，该项目处于测试版本，存在大量错误和问题。如果你想帮助该项目，请在实验室环境中使用，而非你的真实环境。 不，尚未实现 HTTPS，它将在下一个升级版本中加入。 Heimdall 它是一个用于集中管理 nix 服务器中易受攻击软件包的工具。 开始之前 root@kitploit: 你需要安装 Python pip，请使用以下命令检查 which pip 如果已安装 pip，只需运行 pip install -U pip 如果没有安装 pip，请通过以下链接安装 https://pip.pypa.io/en/stable/installing/ 如何安装 root@kitploit: g...

ELFLoader

ELFLoader This is a ELF object in memory loader/runner. The goal is to create a single elf loader that can be used to run follow on capabilities across all x8664 and x86 nix operating systems. How it works The way this loader works is that it has all the code needed to build and load an ELF objec...

makes

⚠️ 弃用通知 ⚠️ 经过对Makes及其他构建系统替代方案的全面审查，Fluid Attacks决定将所有构建全面迁移至Nix Flakes。 这一决定带来了显著的好处，包括有机会依赖并为令人惊叹的Nix社区做出贡献，而不是维护我们自己的构建系统。 这也意味着Makes不再维护，将被归档。 更多信息请访问 https://github.com/fluidattacks/makes/issues/1439。 🦄 Makes 由Nix驱动的CI/CD框架。 为什么 是否曾经需要 在本地运行应用程序 以测试你的代码？ 在本地执行CI/CD流水线 以确保作业通过？ 冻结执行环境...

CVE-2026-64846

A flaw was found in Nix. A malicious derivation, when executed with the recursive-nix experimental feature enabled, can exploit a time-of-check/time-of-use TOCTOU race condition in the final symlink handling of the LocalStore restore path. This allows the Nix process or nix-daemon to create or...

Linux Distros Unpatched Vulnerability : CVE-2026-64846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can...

DEBIAN-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

UBUNTU-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

EUVD-2026-63424

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...