600 matches found
rootend
rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |\ /\ / / \ /\ ...
Hwacha
Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. $python hwacha.py &&&& && && &&...
nixos-config
Lan Tian's NixOS Configuration This repository holds the configuration files for all my NixOS systems. Features Full system root-on-tmpfs, using impermanence Nftables instead of iptables Secret management with sops-nix QEMU user mode emulation for most architectures Nix Flakes with Nixpkgs patchi...
Nix-Auditor
Nix Auditor CIS Audit made easier RHEL, CentOS Usage: 1. Make it executable ...eg chmod +x filename 2. Execute it. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Change Log - Credits to Metale Added color variables BLUE, RED, NC NO COLOR and GRE...
Fennec
Fennec 🦊 fennec is an artifact collection tool written in Rust to be used during incident response on nix based systems. fennec allows you to write a configuration file that contains how to collect artifacts. Features 🌟 🦀 A single statically compiled binary 🔬 Execute any osquery SQL query 💻 Execu...
makes
⚠️ Deprecation notice ⚠️ After a thorough review of Makes and other build system alternatives, Fluid Attacks has decided to transition fully to Nix Flakes for all our builds. This decision brings significant benefits, including the opportunity to rely on and contribute to the incredible Nix...
the-endorser
🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...
DEBIAN-CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110451
Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape for an unconfined build because a certain size threshold is mishandled...
CVE-2026-110453
Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients...
DEBIAN-CVE-2026-110450
Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...
CVE-2026-110450
Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...
CVE-2026-110451
Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape for an unconfined build because a certain size threshold is mishandled...
CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user who invoked the installer even though it should be root ownership...
CVE-2026-110450
Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification...
CVE-2026-110453
A flaw was found in Nix. When running in an unsandboxed configuration on macOS or FreeBSD, the service incorrectly permits connections initiated by build users to daemon clients. A local attacker or malicious build process could exploit this vulnerability to interact directly with the daemon,...
CVE-2026-110452
A flaw was found in nix. The multi-user installer incorrectly assigns ownership of Nix store contents to the user who ran the installation rather than to root. A local user who executed the installer can modify files within the Nix store, leading to unauthorized modification of installed software...