usbsas

usbsas 是一个免费开源（GPLv3）工具和框架，用于安全地读取不受信任的 USB 大容量存储设备。 概述 遵循深度防御和最小权限原则，usbsas 的目标是减少 USB 栈的攻击面。为此，大多数通常在（特权）内核空间中执行的 USB 相关任务（解析 USB 数据包、SCSI 命令、文件系统等）已被移至用户空间，并分离到不同的进程中（微内核风格），每个进程在其受限的 seccomp（安全计算模式）中执行。它运行在 GNU/Linux 上，采用 Rust 编写。 使用场景 自助终端 / 浸羊站，用于安全地将文件从不受信任的 USB 设备传输到受信任的设备 对不受信任的 USB...

Binary Exploits

Exploit Database's Binary Exploits Binary exploits are located in the /bin-sploits/ directory. This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: https://gitlab.com/exploit-database/exploitdb Binary...

nullinux

nullinux Nullinux is an internal penetration testing tool for Linux that can be used to enumerate OS information, domain information, shares, directories, and users through SMB. If no username and password are provided in the command line arguments, an anonymous login, or null session, is...

java-remote-class-loader

This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...

LooneyPwner

LooneyPwner Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept PoC exploit tool targeting the critical buffer overflow vulnerability, nicknamed "Looney Tunables," found in the GNU C Library glibc...

POC-CVE-2023-32233

Use-After-Free en Netfilter nftables al procesar solicitudes por lotes Demo Detalles de la Vulnerabilidad El código afectado proviene del kernel oficial de Linux desde https://kernel.org/ y forma parte del componente Netfilter nftables net/netfilter/nftablesapi.c. Netfilter nftables permite...

avml

AVML Adquisición de memoria volátil para Linux Resumen Una herramienta portátil de adquisición de memoria volátil para Linux. AVML es una herramienta de adquisición de memoria volátil en el espacio de usuario userland para X8664, escrita en Rust, pensada para desplegarse como un binario estático...

heimdall_webserver

ATTENTION, this project is on a beta version, there's a lot of bugs and problem, if you want to help the project use this on a lab not in yout real environment. NO, there's not https implemented yet, it will come on the next upgrade Heimdall It's a tool to manage vulnerables packages in your nix...

linux_mint_poc

Bug de inyección de comandos en 'yelp' de Linux Mint 18.3-19.1 Causa raíz Los manejadores de URI help://, ghelp:// y man:// están definidos en el archivo /usr/share/applications/yelp.desktop, que ejecutará /usr/local/bin/yelp mediante Exec=yelp %u cada vez que se invoque uno de esos manejadores d...

apkinspector

AndroidAnalysisGUI This is a guide to get the alpha release of Android Analysis GUI. It has only been tested on Linux. 1. Install Qt SDK. 1Download the QtSDK QtSDKLin32offlinev111en.run from "http://qt.nokia.com/downloads/sdk-linux-x11-32bit-cpp-offline" and install it using root permission...

trivy

📖 Documentation Trivy pronunciation is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Targets what Trivy can scan: Container Image...

killcast

Manipulate Chromecast Devices in your Network Available in Inspiration - Thousands of Google Chromecast Devices Hijacked to Promote PewDiePie This tool is a Proof of Concept and is for Research Purposes Only, killcast shows how Chromecast devices can be easily manipulated and hijacked by anyone...

Sinister

Sinister root@kitploit: This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and...

CVE

CVE Una colección de scripts de proof-of-concept escritos por el equipo de STAR Labs para varios CVEs que descubrieron o que fueron encontrados por otros. CVE-2026-53264 Objetivo: Linux Kernel Versión: CentOS 9 kernel version 5.14.0-721 Exploit escrito por: Lee Jia Jie CVE-2025-29824 Objetivo:...

selinux-notebook

The SELinux Notebook Introduction The SELinux Notebook is an Open Source book on SELinux, originally created by Richard Haines and donated to the SELinux community. The Notebook's goal is to be the most current and comprehensive book on SELinux, covering the Linux Kernel components, the userspace...

bad-epoll

Bad Epoll: el bug que Mythos pasó por alto Un proceso sin privilegios escalando a root en Google kernelCTF. Bad Epoll CVE-2026-46242 es un use-after-free por condición de carrera en el subsistema epoll del kernel de Linux. Este bug permite que un proceso sin privilegios se convierta en root, no...

KaliPackergeManager

KaliPackergeManager kalipm.sh is a powerful package management tool for Kali Linux that provides a user-friendly menu-based interface to simplify the installation of various packages and tools. It streamlines the process of managing software and enables users to effortlessly install packages from...

git-scanner

Git Scanner Framework...

iptable_evil

iptableevil iptableevil is a very specific backdoor for iptables that allows all packets with the evil bit set, no matter the firewall rules. The initial implementation is in iptableevil.c, which adds a table to iptables and requires modifying a kernel header to insert a spot for it. The second...

RCLocals

RCLocals Inspired by 'Autoruns' from Sysinternals, RCLocals analyzes all Linux startup possibilities to find backdoors, also performs process integrity verification, scan for DLL injected processes and much more Things covered: ·List GPG keys trusted by the system ·Installed Packages ·File...