Hwacha

ह्वाचा https://www.n00py.io/2017/12/raining-shells-on-linux-environments-with-hwacha/ ह्वाचा एक उपकरण है जो Nix आधारित सिस्टम पर तेजी से पेलोड निष्पादित करने के लिए है। उन सिस्टमों के पूरे सबनेट पर आसानी से कलाकृतियाँ एकत्र करें या शेलकोड निष्पादित करें जिनके लिए क्रेडेंशियल प्राप्त किए गए हैं।...

heimdall_webserver

ध्यान दें, यह प्रोजेक्ट बीटा संस्करण पर है, इसमें बहुत सारे बग और समस्याएं हैं, यदि आप प्रोजेक्ट की मदद करना चाहते हैं तो इसे अपने वास्तविक वातावरण में नहीं, बल्कि एक प्रयोगशाला में उपयोग करें। नहीं, अभी https लागू नहीं किया गया है, यह अगले अपग्रेड में आएगा Heimdall यह आपके nix सर्वरों में कमजोर...

Nix-Auditor

निक्स ऑडिटर CIS ऑडिट को आसान बनाया गया RHEL, CentOS उपयोग: 1. इसे एक्ज़ीक्यूटेबल बनाएं ...जैसे chmod +x filename 2. इसे चलाएं। 3. https://the-infosec.com/2017/03/20/auditing-linux-unix-os-in-120-seconds-flat/ निक्स ऑडिटर 2.0: परिवर्तन लॉग - क्रेडिट्स टू मेटाले पंक्तियों 210-213 पर ब्लू, रेड, एनसी...

the-endorser

🚨 The Endorser is no longer maintained. If you need support or consultation for your OSINT endeavours, drop me an e-mail [email protected] 🚨 The Endorser An OSINT tool that allows you to draw out relationships between people on LinkedIn via endorsements/skills. Check out the example digraph,...

Fennec

Fennec 🦊 fennec è uno strumento di raccolta di artefatti scritto in Rust per essere utilizzato durante la risposta agli incidenti su sistemi basati su nix. fennec permette di scrivere un file di configurazione che specifica come raccogliere gli artefatti. Caratteristiche 🌟 🦀 Un singolo binario...

nixos-config

Configurazione NixOS di Lan Tian Questo repository contiene i file di configurazione per tutti i miei sistemi NixOS. Caratteristiche Root di sistema completo su tmpfs, usando impermanence Nftables invece di iptables Gestione dei segreti con sops-nix Emulazione in modalità utente QEMU per la maggi...

rootend

rootend rootend is a python nix Enumerator & Auto Privilege Escalation tool. For a full list of our tools, please visit our websitehttps://www.twelvesec.com/ Written by: nickvourd twitter maldevel twitter servo Usage root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /| |...

rootend

rootend rootend هي أداة تعداد ورفع صلاحيات تلقائية لأنظمة nix مكتوبة بلغة Python. للقائمة الكاملة لأدواتنا، يرجى زيارة موقعنا علىhttps://www.twelvesec.com/ كتب بواسطة: nickvourd twitter maldevel twitter servo الاستخدام root@kitploit: . \ / | | / / | | \ / / // | |\ / // \ \ / / \ | | \ /\ /|...

ELFLoader

ELFLoader Dies ist ein ELF-Objekt-Loader/Runner im Speicher. Das Ziel ist es, einen einzigen ELF-Loader zu erstellen, der verwendet werden kann, um Folgefunktionen auf allen x8664- und x86-Nix-Betriebssystemen auszuführen. Wie es funktioniert Dieser Loader funktioniert so, dass er den gesamten Co...

makes

⚠️ Hinweis zur Einstellung ⚠️ Nach einer gründlichen Überprüfung von Makes und anderen Build-System-Alternativen hat sich Fluid Attacks entschieden, vollständig auf Nix Flakes für all unsere Builds umzusteigen. Diese Entscheidung bringt erhebliche Vorteile mit sich, darunter die Möglichkeit, sich...

Linux Distros Unpatched Vulnerability : CVE-2026-64846

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can...

UBUNTU-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2...

DEBIAN-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

EUVD-2026-63424

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix versions prior to 2.35.0 contain a TOCTOU race in the LocalStore restore path: writeFile opens a path with O_TRUNC instead of enforcing FinalSymlink::DontFollow, allowing a malicious derivation (with recursive-nix enabled) to create or truncate an empty file outside the build sandbox with dae...

PT-2026-79064

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-72410

A flaw was found in the Linux kernel's octeontx2-af driver. This vulnerability stems from an incorrect validation check when setting the maximum number of NIX Logical Functions LFs using the devlink command. An attacker could potentially exploit this to configure the system in an unintended state...