638 matches found
nixos-config
Lan Tian's NixOS Configuration This repository holds the configuration files for all my NixOS systems. Features Full system root-on-tmpfs, using impermanence Nftables instead of iptables Secret management with sops-nix QEMU user mode emulation for most architectures Nix Flakes with Nixpkgs patchi...
Fennec
Fennec 🦊 fennec is an artifact collection tool written in Rust to be used during incident response on nix based systems. fennec allows you to write a configuration file that contains how to collect artifacts. Features 🌟 🦀 A single statically compiled binary 🔬 Execute any osquery SQL query 💻 Execu...
rootend
rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |\ /\ / / \ /\ ...
the-endorser
🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...
Nix-Auditor
Nix Auditor CIS Audit made easier RHEL, CentOS Usage: 1. Make it executable ...eg chmod +x filename 2. Execute it. 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ Nix Auditor 2.0: Change Log - Credits to Metale Added color variables BLUE, RED, NC NO COLOR and GRE...
Hwacha
Hwacha https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ Hwacha is a tool to quickly execute payloads on Nix based systems. Easily collect artifacts or execute shellcode on an entire subnet of systems for which credentials are obtained. $python hwacha.py &&&& && && &&...
makes
⚠️ Deprecation notice ⚠️ After a thorough review of Makes and other build system alternatives, Fluid Attacks has decided to transition fully to Nix Flakes for all our builds. This decision brings significant benefits, including the opportunity to rely on and contribute to the incredible Nix...
ELFLoader
ELFLoader This is a ELF object in memory loader/runner. The goal is to create a single elf loader that can be used to run follow on capabilities across all x8664 and x86 nix operating systems. How it works The way this loader works is that it has all the code needed to build and load an ELF objec...
[SECURITY] Fedora 45 Update: nix-2.35.3-2.fc45
Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...
Fedora 45 : nix (2026-d34d705a38)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d34d705a38 advisory. Update to 2.35.3 which addresses: CVE-2026-110450 High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56 and other Moderate issues: see...
CVE-2026-48907
E.L.V CVE Research & Assessment Framework E.L.V — Exploit Loader & Vulnerability Firmware Cybersecurity research utility for authorized vulnerability assessment. Table of Contents Overview Important Safety Notice Project Information What the Current Script Does Workflow Requirements Installation...
`nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)
Decoder::unpack does not safely contain the paths it extracts, so a malicious NAR archive can create files outside the destination directory — a path traversal CWE-22. In src/dec.rs Decoder::unpack: - A symlink entry's target is written without checking where it points src/dec.rs:153, so the...
gen-polyglot (>=0.1.30, <=0.1.55), nix-nar-cli (>=0.1.0, <=0.3.1) potentially affected by unknown CVE via nix-nar (>=0.1.0, <=0.3.1)
nix-nar CARGO version =0.1.0, =0.1.30, =0.1.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0425...
RUSTSEC-2026-0425 `nix-nar`: `Decoder::unpack` writes archive entries outside the destination directory (path traversal)
Decoder::unpack does not safely contain the paths it extracts, so a malicious NAR archive can create files outside the destination directory — a path traversal CWE-22. In src/dec.rs Decoder::unpack: - A symlink entry's target is written without checking where it points src/dec.rs:153, so the...
[SECURITY] Fedora 43 Update: nix-2.31.6-1.fc43
Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...
[SECURITY] Fedora 44 Update: nix-2.35.3-2.fc44
Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...
Fedora 43 : nix (2026-065497e462)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-065497e462 advisory. Update to 2.31.6 which addresses: CVE-2026-110450 High, https://github.com/NixOS/nix/security/advisories/GHSA-jwvx-xq5j-gc56 and other Moderate issues: see...
Fedora 44 : nix (2026-d9fe9e0ac3)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d9fe9e0ac3 advisory. - Update to 2.35: https://nix.dev/manual/nix/2.35/release-notes/rl-2.35.html Version 2.35.3 addresses: - CVE-2026-110450 High,...
Linux Distros Unpatched Vulnerability : CVE-2026-110451
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape for an unconfined build because a certain size threshold is mishandled...
