Podroid

Podroid Run Linux containers and a full Linux desktop on your Android phone. No root. A real Alpine Linux VM with its own kernel - not a chroot or proot trick - so Podman, Docker and LXC behave exactly like they do on a server. Website · Documentation · Download APK Home | Running | !Built-in...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do? 1. provides a clean Linux environment for a presentation 2. let...

WSL_Payload_Builder

WSL Payload Builder Aviso legal Esta herramienta está pensada para la investigación legítima de seguridad y las pruebas de penetración. Los usuarios son responsables de asegurarse de contar con la autorización adecuada antes de probar sistemas que no poseen o para los que no tienen permiso...

copyfail-alpine

This is a more minimal port of Copy Fail LPE CVE-2026-31431 which patches the first few bytes of /etc/passwd so that su-ing to root requires no password. This reduces the total size of the original exploit and makes it more portable. Distributions like Alpine use busybox/musl instead of a...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile Esto proporciona una imagen dockerfile de PoC para CVE-2025-48384, relacionada con https://github.com/vinieger/CVE-2025-48384, para que pueda probarse dentro de un clúster de Kubernetes. Desplegándolo en GKE: Compilando y publicando en el registro de GCP: cambia...

POC-IngressNightmare-CVE-2025-1974

Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ⚠️...

ALPINE-CVE-2026-19445

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

ROOT-OS-ALPINE-315-CVE-2025-64720 CVE-2025-64720 in libpng - Patched by Root

Root has patched CVE-2025-64720 in the libpng package for Root:Alpine:3.15. Multiple fixed versions available...

ALPINE-CVE-2026-84782

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

ALPINE-CVE-2026-75806

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

ALPINE-CVE-2026-72897

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

ALPINE-CVE-2026-54872

Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn...

ROOT-OS-ALPINE-323-CVE-2026-22796 CVE-2026-22796 in openssl - Patched by Root

Root has patched CVE-2026-22796 in the openssl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-324-CVE-2026-7383 CVE-2026-7383 in openssl - Patched by Root

Root has patched CVE-2026-7383 in the openssl package for Root:Alpine:3.24. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-42945 CVE-2026-42945 in nginx - Patched by Root

Root has patched CVE-2026-42945 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-1642 CVE-2026-1642 in nginx - Patched by Root

Root has patched CVE-2026-1642 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-42533 CVE-2026-42533 in nginx - Patched by Root

Root has patched CVE-2026-42533 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root

Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...