Malware in @pkgship/frps-linux-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18199 Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e58ce3b050fea33c534b17cada105c9c7eef3b0daf59a904a1b31151035a727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pkgship/frps-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8e58ce3b050fea33c534b17cada105c9c7eef3b0daf59a904a1b31151035a727 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

staekka

Stækka Metasploit - Extenting Metasploit This Msf plugin extends Metasploit for some missing features and modules allowing interaction with other/custom exploits/ways of getting shell access. The current focus here is Linux/Unix support. Core features TTY support: starting a shell from Metasploit...

CVE-2026-98706

A flaw was found in the Linux kernel's mac80211 wireless subsystem. A local user or adjacent attacker could trigger a Denial of Service DoS resulting in a system crash. This issue arises from a race condition during the removal of an access point AP or mesh station, where background power-save...

smolvm

English · 中文 · 日本語 · 한국어 smolvm Branchable microVMs for AI agents. Embed lightweight virtual machines into your software, portable dev environments, and local sandboxing. Install brew install smol-machines/tap/smolvm macOS Homebrew curl -sSL https://smolmachines.com/install.sh | bash macOS + Linu...

Malware in @pkgship/frpc-linux-amd64

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-18198 Malicious code in @pkgship/frpc-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b326de85c188621a7204e38f8d68eea6969822d6012215c9f776fa70054568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @pkgship/frpc-linux-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 99b326de85c188621a7204e38f8d68eea6969822d6012215c9f776fa70054568 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bscan

:mag: an asynchronous target enumeration tool :magright: Synopsis bscan is a command-line utility to perform active information gathering and service enumeration. At its core, bscan asynchronously spawns processes of well-known scanning utilities, repurposing scan results into highlighted console...

reverie

reverie Automated Pentest Tools Designed For Parrot Linux this tool will make your basic pentesting task like Information Gathering, Security Auditing, And Reporting so this tool will do every task fully automatic. Usage Guide Download / Clone git clone https://github.com/baguswiratmaadi/reverie ...

pipe-primitive

pipe-primitive An exploit primitive in linux kernel inspired by DirtyPipe CVE-2022-0847. A while ago, like many security veterans, I studied and reproduced the DirtyPipe CVE-2022-0847 vulnerability, and deeply felt how useful this bug is. It starts from an uninitialized memory issue and ends with...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

Sinister

Sinister This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and personal use. TH...

Platypus

Platypus A host management hub for fleets of Linux machines. Install the Platypus agent on every host you own; the agent dials back to your Platypus server over TLS + protobuf; from the server you get an interactive shell, file management, and network tunnelling on every managed host — through on...

PwnSTAR

PwnSTAR Platforms Designed for Kali Linux. I also have it working in Linux Mint 16. Should run on any flavour of Linux with a little tweaking. Installing Installer script Clone from github https://github.com/SilverFoxx/PwnSTAR.git Change directory to path/to/clone/PwnSTAR Run ./installer.sh. This...

cve-2014-4699-ptrace

writeup https://duasynt.com/blog/cve-2014-4699-linux-kernel-ptrace-sysret-analysis...

cve-2014-0038

Local root exploit for CVE-2014-0038 Bug: The X86X32 recvmmsg syscall does not properly sanitize the timeout pointer passed from userspace. Exploit primitive: Pass a pointer to a kernel address as timeout for recvmmsg, if the original byte at that address is known it can be overwritten with known...

sslscan

sslscan2 sslscan version 2 has now been released. This includes a major rewrite of the backend scanning code, which means that it is no longer reliant on the version of OpenSSL for many checks. This means that it is possible to support legacy protocols SSLv2 and SSLv3, as well as supporting TLSv1...

VPNPivot

VPN Pivot: Sometime we do external penetration testing and when we compromise the remote target we would like to explore the internal network behind and getting such compromise like owning Active directory, accessing shared files, conducting MITM attacks ... etc. There are many techniques around...