instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser...

MagicArch

MagicArch: Automated Arch Linux Setup for Pentesting by MagicBytes MagicArch is a comprehensive post-installation script built with Ansible, designed to transform a basic Arch Linux installation into a fully equipped Pentesting Distro customized for pentesting and performance. With a focus on...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

ArchStrike

ArchStrike An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x8664, ARMv6, ARMv7, and ARMv8. Our website Our Twitter ArchStrike is a penetration testing and security repository for users of Arch Linux, following Arch Linux standards to...

pentmenu

pentmenu 中文说明 A bash select menu for quick and easy network recon and DOS attacks Sudo is implemented where necessary. Tested on Debian and Arch. Contributions and pull requests are most welcome! Requirements: bash sudo curl netcat must support '-k' option, openbsd variant recommended hping3 or...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

meshdeck

meshdeck Puerto de MeshDeck para Arch Linux ARM - Wilson Esto fue originalmente portado al repositorio Wilson de Arch Linux ARM. El repositorio Wilson se está fusionando con el Proyecto ArchAssault http://www.archassault.org debido a que hay superposición y objetivos similares. Todo el trabajo...

inetutils-CVE-2019-0053-Patched-PKGBUILD

inetutils hasn't been updated in 5 years, and neither has the official Arch package. A patch has been released that addresses CVE-2019-0053 buffer overflow exploit from the use of sprintf instead of snprintf, but there's no official release in sight. Honestly, there's a lot more wrong with using...

whoami-project

Whoami - Enhanced Privacy and Anonymity for Debian and Arch-based Linux Distributions Feature Request | Report a Bug About the Project Whoami is a user-friendly privacy and anonymity tool designed for Debian and Arch-based Linux distributions. With its simple interface and ease of use, it...

CVE-2026-52727 lxc-ci: Pacman keyring stored in archlinux image with a private key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

EUVD-2026-82369

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-52727

lxc-ci , the continuous integration and image-build scripts for LXC , shipped Arch Linux images (built from images/archlinux.yaml) that retained a shared pacman local-signing private key in /etc/pacman.d/gnupg. Every container or VM created from those images inherited the same key. An attacker wh...

pwnkit

pwnkit Uso Probado en Arch Linux y Ubuntu 18.04 root@kitploit: git clone https://github.com/c3l3si4n/pwnkit; make ./pwnkit...

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Attackers took over more than 400 packages in the Arch User Repository AUR this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF...

Atomic Arch Campaign Hijacks 20+ Linux AUR Packages to Deliver Malware

Over 20 Linux packages were compromised in the Atomic Arch campaign, which abuses AUR ownership transfers to drop rootkit-like malware...

Lyussfyuring002

lyussfyuring002 web exploitation + OSINT toolkit for people...

Exploit for Argument Injection in Phpmailer_Project Phpmailer

MediCare Portal Intentionally vulnerable healthcare patient...

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...

CVE-2026-25828

grub-btrfs through 2026-01-31 on Arch Linux and derivative distributions allows initramfs OS command injection because it does not sanitize the $root parameter to resolvedevice. NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific...