sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

vuls

Vuls: VULnerability Scanner Vulnerability scanner for Linux/FreeBSD, agent-less, written in Go. Twitter: @vulsen Abstract For a system administrator, having to perform security vulnerability analysis and software update on a daily basis can be a burden. To avoid downtime in a production...

dockernymous

SCROLL DOWN FOR REQUIREMENTS AND INSTRUCTIONS IT JUST WON'T WORK IF YOU DON'T FOLLOW THEM Warning: Dockernymous is in a very early state of development. Only use it for educational purposes. DON'T use it if you rely on strong anonymity! News 13.10.2018 I completely changed the overall function...

secfixes-tracker

Alpine 安全修复跟踪器 这是一个 Flask Web 应用程序，用于跟踪 Alpine 中的安全修复。 通过使用 Alpine secdb，我们通常可以推断哪些 CVE 已修复，哪些尚未修复。将添加对 secfixes 报告模式的一些扩展，以允许软件包维护者标记误报。 在不久的将来，当引擎处理状态更改时，这些更改将被报告到安全公告列表中。 设置 你应该以通常的方式创建一个 virtualenv，然后执行 pip3 install -r requirements.txt。 如果你想使用 sqlite 以外的数据库，你需要安装相应的驱动程序，例如 pip3 install...

WSL_Payload_Builder

WSL 载荷生成器 免责声明 本工具旨在用于合法的安全研究和渗透测试。用户有责任确保在测试非自己拥有或未获得明确许可的系统前，已获得适当授权。 概述 一个用于创建带有嵌入式载荷的极简 WSL（适用于 Linux 的 Windows 子系统）发行版的 shell 脚本。此工具可自动化构建基于 Alpine Linux 的 WSL 发行版的过程，这些发行版可在启动时执行自定义载荷。 BuildWSLPayload.sh 脚本会下载最新的 Alpine Linux rootfs，针对 WSL 使用进行自定义，嵌入用户指定的可执行文件，并将所有内容打包为可分发的 .wsl 文件。...

Podroid

Podroid 在 Android 手机上运行 Linux 容器和完整的 Linux 桌面。无需 root。 一个带有自己内核的真正 Alpine Linux 虚拟机——不是 chroot 或 proot 技巧——因此 Podman、Docker 和 LXC 的行为方式与在服务器上完全一致。 网站 · 文档 · 下载 APK 主页 | 运行中 | 终端 | !带主题和字体的终端快捷设置https://assets.kitploit.com/production/public/readmes/13125/d4d46114c43e6...

melange

melange 使用声明式流水线构建 apk 软件包。 通常用于为使用 apko 构建的容器镜像提供自定义软件包。大多数 apk 都是为 Wolfi 或 Alpine Linux 生态系统而构建的。 主要特性： 面向流水线的构建。 与传统包管理器（具有不同的阶段）不同，构建流水线的每一步都由你定义和控制。 默认多架构。 使用 QEMU 模拟各种架构，从而无需交叉编译步骤。 为什么 安全软件工厂是 DevOps 的演进，允许用户证明软件设备中所有工件的来源。通过将软件工件构建并捕获到软件包中，DevOps 团队可以像管理镜像的任何其他组件一样管理其软件工件。 在构建采用 apko 的 OC...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do? 1. provides a clean Linux environment for a presentation 2. let...

docker-onion-nmap

docker-onion-nmap Use nmap to scan hidden "onion" services on the Tor network. Minimal image based on alpine, using proxychains to wrap nmap. Tor and dnsmasq are run as daemons via s6, and proxychains wraps nmap to use the Tor SOCKS proxy on port 9050. Tor is also configured via DNSPort to...

ROOT-OS-ALPINE-315-CVE-2025-64720 CVE-2025-64720 in libpng - Patched by Root

Root has patched CVE-2025-64720 in the libpng package for Root:Alpine:3.15. Multiple fixed versions available...

ALPINE-CVE-2026-84782

Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...

ALPINE-CVE-2026-75806

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

ALPINE-CVE-2026-72897

Issue summary: A TLS server that calls SSLsetSSLCTX to switch a connection to a different SSLCTX part way through a handshake may access memory beyond the end of an internal array if the replacement context knows about more provider signature algorithms than the context the connection was created...

ALPINE-CVE-2026-54872

Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn...

ROOT-OS-ALPINE-323-CVE-2026-22796 CVE-2026-22796 in openssl - Patched by Root

Root has patched CVE-2026-22796 in the openssl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-324-CVE-2026-7383 CVE-2026-7383 in openssl - Patched by Root

Root has patched CVE-2026-7383 in the openssl package for Root:Alpine:3.24. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-1642 CVE-2026-1642 in nginx - Patched by Root

Root has patched CVE-2026-1642 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-42945 CVE-2026-42945 in nginx - Patched by Root

Root has patched CVE-2026-42945 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-56434 CVE-2026-56434 in nginx - Patched by Root

Root has patched CVE-2026-56434 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-60005 CVE-2026-60005 in nginx - Patched by Root

Root has patched CVE-2026-60005 in the nginx package for Root:Alpine:3.20. Multiple fixed versions available...