instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do? 1. provides a clean Linux environment for a presentation 2. let...

MagicArch

MagicArch：适用于渗透测试的自动化 Arch Linux 配置 作者：MagicBytes MagicArch 是一个基于 Ansible 构建的全面性安装后脚本，旨在将基础的 Arch Linux 安装转变为完全装备的、专为渗透测试和性能定制的渗透测试发行版。MagicArch 专注于安全评估、定制化和性能优化，简化了设置流程，并确保为渗透测试任务提供量身定制的环境。 特点 Ansible 驱动的自动化 ：借助 Ansible 的强大功能，MagicArch 简化了设置过程，自动配置了必要的工具和设置。 渗透测试工具集成 ：MagicArch...

creepy

creepy Current Version 1.1 Author Yiannis Kakavas Homepage http://www.geocreepy.com Installation Instructions See http://www.geocreepy.com Description Geolocation OSINT tool. Creepy is a geolocation OSINT tool. Gathers geolocation related information from online sources, and allows for presentati...

ArchStrike

ArchStrike ArchStrike 即将停止维护 对于一直关注我们的人来说，这应该并不意外，但这个项目已经有一段时间没有得到维护了。随着时间的推移，ArchStrike 提供的大部分核心应用都已经有了官方的上游软件包，因此我们需要移除或重做的东西越来越多，而我们的付出所带来的回报却越来越少。与此同时，AS 团队的每位成员都发现自己能投入到这样一个项目上的时间越来越少，我们花了比预期更长的时间才最终达成一致，决定将其关闭。 GitHub 组织将继续存在，此仓库将被归档，以备将来有人需要时使用。 感谢所有在 ArchStrike...

inetutils-CVE-2019-0053-Patched-PKGBUILD

inetutils 已经 5 年没有更新了，官方的 Arch 包也是如此。有一个补丁已经发布，解决了 CVE-2019-0053（使用 sprintf 而非 snprintf 导致的缓冲区溢出漏洞），但官方版本遥遥无期。 老实说，使用 telnet 的问题远不止缓冲区漏洞，但这是一个高优先级的紧急问题，花了 10 分钟解决。目前正在等待官方维护者的回复，但在此之前这个仓库可以临时使用。...

pentmenu

pentmenu 一个能让你进行快速简便网络扫描与DOS攻击的命令菜单 必要时需要sudo 已在Debian与Arch下测试通过 依赖： bash sudo curl netcat（必须支持'-k'选项，推荐openbsd版本） hping3（或者用nping来代替进行洪水攻击） openssl stunnel nmap whois（推荐但不要求） nslookup（或'host'） ike-scan 如何使用？ 下载脚本： $ wget https://raw.githubusercontent.com/GinjaChris/pentmenu/master/pentmenu 给予运行权...

trivy-action

Trivy Action GitHub Action for Trivy !GitHub Releaserelease-imgrelease !GitHub Marketplacemarketplace-imgmarketplace !Licenselicense-imglicense Table of Contents Usage Scan CI Pipeline Scan CI Pipeline w/ Trivy Config Cache Trivy Setup Scanning a Tarball Using Trivy with templates Using Trivy wit...

whoami-project

Whoami - 面向 Debian 和 Arch 系 Linux 发行版的增强隐私与匿名工具 功能请求 | 报告 Bug 关于项目 Whoami 是一款面向 Debian 和 Arch 系 Linux 发行版的用户友好型隐私与匿名工具。凭借其简洁的界面和易用性，它利用 9 个以上强大的模块 来确保最高级别的匿名性。该工具还包含一个 Bug Fixer 模块（目前正在开发中），可在无需用户干预的情况下解决问题。 注意： 虽然 Whoami 能增强您的匿名性，但请记住，互联网上不存在 100% 的安全！ 有关详细文档，请访问官方网站：Whoami 项目。 模块 模块名称| 描述...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

blackarch

Tabla de Contenidos Descripción Visión General Descarga e Instalación Características Principales Instrucciones de Instalación Uso Participa Contribuir Contacto Licencia Descargo de Responsabilidad Conclusión Descripción BlackArch Linux es una distribución de pruebas de penetración basada en Arch...

meshdeck

meshdeck Puerto de MeshDeck para Arch Linux ARM - Wilson Esto fue originalmente portado al repositorio Wilson de Arch Linux ARM. El repositorio Wilson se está fusionando con el Proyecto ArchAssault http://www.archassault.org debido a que hay superposición y objetivos similares. Todo el trabajo...

pwnkit

pwnkit Uso Probado en Arch Linux y Ubuntu 18.04 git clone https://github.com/c3l3si4n/pwnkit; make ./pwnkit...

Linux Distros Unpatched Vulnerability : CVE-2026-52727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from...

DEBIAN-CVE-2026-52727

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-52727 lxc-ci: Pacman keyring stored in archlinux image with a private key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-52727

lxc-ci , the continuous integration and image-build scripts for LXC , shipped Arch Linux images (built from images/archlinux.yaml) that retained a shared pacman local-signing private key in /etc/pacman.d/gnupg. Every container or VM created from those images inherited the same key. An attacker wh...

CVE-2026-52727

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

EUVD-2026-82369

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

CVE-2026-52727: Use of Hard-coded Cryptographic Key

lxc-ci contains continuous integration and image-build scripts for LXC. Prior to the 2026-05-28 Arch Linux image publication, images built from images/archlinux.yaml retain the same pacman local-signing private key in /etc/pacman.d/gnupg and redistribute it to every container or virtual machine...

Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit

Attackers took over more than 400 packages in the Arch User Repository AUR this week and rewrote their build scripts to install a credential stealer on any machine that built them. The malware is a Rust binary built to harvest developer secrets. When it lands with root, it can also load an eBPF...