weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

kernel-c-to-rust-spike

Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...

CVE-2026-98072

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering connection resets or teardowns. Due to a missing memory barrier during transmission release, a race condition can cause the system t...

CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this...

tachyon

Tachyon Tachyon is a fast web application security reconnaissance tool. It is specifically meant to crawl a web application and look for left over or non-indexed files with the addition of reporting pages or scripts leaking internal data. User Requirements Linux Python 3.6+ User Installation...

firmadyne

Table of Contents Table of Contents Introduction Setup Extractor Database Binaries QEMU Usage FAQ run.sh is not generated Log ends with "Kernel panic - not syncing: No working init found" A process crashed, e.g. dopagefault 2: sending SIGSEGV for invalid read access from 00000000 How do I debug t...

radmin-vpn-linux

Radmin VPN for Linux Run Radmin VPN on Linux via Wine. Join VPN networks, see peers, play games — all without a Windows VM. I did not build this because it was easier than a VM. I built it because I thought it was easier than a VM. AI-assisted code. Built collaboratively between a human and Claud...

CVE-2026-98070

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS subsystem. Due to improper synchronization during TCP connection path resets, transmit operations can run concurrently while connection state is being modified. An attacker could exploit this timing window during connection...

rtl8812au

Controladores inalámbricos RTL8812AU/21AU y RTL8814AU Solo para uso con Linux y Android ESTOS CONTROLADORES ESTÁN OBSOLETOS. Use los controladores mac80211 en https://github.com/lwfinger/rtw88 ¡Importante! root@kitploit: Use "ip" e "iw" en lugar de "ifconfig" e "iwconfig" Se describe más abajo,...

dd

dd Run Linux containers on macOS — with no VM. What is dd? dd runs Linux containers natively on Apple-Silicon macOS without a virtual machine. There is no Linux kernel and no hypervisor underneath: a JIT translates the container's code and services its Linux syscalls in userspace the gVisor / PRo...

strace

strace - el trazador de llamadas al sistema de Linux Este es strace -- una utilidad de espacio de usuario diagnóstica, de depuración e instructiva con una interfaz de línea de comandos tradicional para Linux. Se utiliza para monitorear y alterar interacciones entre procesos y el kernel de Linux,...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

gef

GEF pronounced ʤɛf - "Jeff" is a set of commands for x86/64, ARM, MIPS, PowerPC and SPARC to assist exploit developers and reverse-engineers when using old school GDB. It provides additional features to GDB using the Python API to assist during the process of dynamic analysis and exploit...

awesome-hex-editors

awesome-hex-editors Una lista seleccionada y enriquecida de editores hexadecimales increíbles para Windows, macOS y Linux. Editores Hexadecimales Todos los programas listados a continuación tienen las capacidades básicas esperadas de un editor hexadecimal, como ver, editar y buscar. La cantidad d...

Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

telegram-nearby-map

Telegram Nearby Map Telegram Nearby Map uses OpenStreetMap and the official Telegram library to find the position of nearby users. Please note: Telegram's API was updated a while ago to make nearby user distances less precise, preventing exact location calculations. Therefore, Telegram Nearby Map...

linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

discover

Discover Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend...

discover

Discover Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend...

linux-malware

linux-malware Rolling 7 day view of updates from this repo Submissions? Press/academia https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control,...