CVE-2021-3560-Authentication-Agent

PolicyKit CVE-2021-3560 Exploit Authentication Agent Technology Details Blog posts about this exploit : https://ricterz.me/posts/2022-04-28-a-new-exploit-method-for-cve-2021-3560-polkit-linux-privilege-escalation.txt...

linux-fingerprint-r503

linux-fingerprint-r503 — fingerprint login for Linux using a Grow R503 + Arduino A from-parts USB fingerprint reader for Linux desktops. Total parts cost under $15. Drop-in replacement for upstream fprintd — PAM, KDE Settings, GNOME Settings, fprintd-verify, sudo with finger, screen-unlock with...

cve-2026-31431

CVE-2026-31431 "Copy Fail" — Detection & Safe Kernel Patch Scripts Linux kernel local privilege escalation via algifaead AFALG CVSS 7.8 HIGH | Public disclosure: April 2026 ⚡ Quick Start 1. Detection Script safe, read-only Run as a normal user: curl -fsSL...

sgx-step

A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...

Sinister

Sinister This small python script can do really awesome work. Sinister is Keylogger Generator for Windows/Linux, which sends key-logs & screenshot via email with other juicy target info written in Python 3. Disclaimer :computer: This project was created only for good purposes and personal use. TH...

CVE-2024-3094-Checker

CVE-2024-3094 Checker The CVE-2024-3094 Checker is a powerful Bash script designed for Linux systems. It identifies vulnerability to CVE-2024-3094, related to XZ/LZMA utilities. This script is essential for system administrators and security professionals to quickly assess and mitigate potential...

dirtyPipe-automaticRoot

Dirty Pipe automatic root exploit CVE-2022-0847 Dependencies: Python 3.10 or above How to use: Automatic root: $ python3.10 dirtyPipe.py -a + hjacking super user in /etc/passwd + dropipng shell Write a no write permission, immutable or read-only mounted file: $ python3.10 dirtyPipe.py -w FILE...

CyberMeowfia

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : ...

tracee

Before moving on, please consider giving us a GitHub star ⭐️. Thank you! About Tracee Tracee is a runtime security and observability tool that helps you understand how your system and applications behave. It is using eBPF technology to tap into your system and expose that information as events tha...

AirmonGUI

AirmonGUI A local web interface for the aircrack-ng wireless toolkit. Screenshots · Quick start · Features · Roadmap · Contributing !WARNING Use this only on networks you own or have written permission to test. Scanning, deauthenticating, or capturing traffic from networks you don't control is...

imR0T

imR0T cryp·tog·ra·phy imR0T: Send a quick message with simple text encryption to your whatsapp contact and , basically in ROT13 with new multi encryption based algorithm on ASCII and Symbols Substitution Donate If this project is very helpful to your penetration testing and u want to support me ,...

tap

The TrustedSec Attack Platform TAP TAP - Remote penetration testing platform builder. Written by: David Kennedy @HackingDave Company: TrustedSec https://www.trustedsec.com Project page: https://github.com/trustedsec/tap A TrustedSec Project - Copyright 2020 Supported operating systems: Linux Ubun...

linux-malware

linux-malware Rolling 7 day view of updates from this repo Submissions? Press/academia https://en.wikipedia.org/wiki/Linuxmalware 17 - Initial Access, Execution, Persistence, Privilege Escalation, Defense Evasion, Credential Access, Discovery, Lateral Movement, Collection, Command and Control,...

Nac_Bypass_Agent

Nac Bypass Agent This piece of code is a script written in Python and designed to run on Kali Linux. Here is a summary explaining what each function does: runcommandcommand: This function runs the command it takes as input and returns its output. killnetworkservices: This function stops the...

LazyPorts

LazyPorts Visual port manager for Linux lazyports is a terminal UI tool to visualize and manage network ports. It provides an interactive table to inspect listening processes and kill them easily. Built with Bubble Tea and Lipgloss. Prerequisites Go 1.24 or higher required for installation...

log4j_scanner_wrapper

Wrapper for scanning Linux directories for log4j vulnerability CVE-2021-44228. Pulling from https://github.com/logpresso/CVE-2021-44228-Scanner. Credit goes here. Scans most suspecting main directories and will exclude nfs mounts. Usage bash log4jscanner.sh optionaljavapath Written by Andrew...

hyperfox

Hyperfox Hyperfox is a security auditing tool that proxies and records HTTP and HTTPS traffic between two points. Installation You can install the latest version of hyperfox to /usr/local/bin with the following command requires admin privileges: curl -sL...

CVE-2023-0669-Analysis

CVE-2023-0669 This Repo contain the pcakages and scripts used in this Analysis https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-goanywhere The vulnerable version of GoAnywhere for Linux https://www.dropbox.com/s/j31l8lgvapbopy3/ga703linuxx64.sh?dl=0...

Linux-for-a-Pentester

🐧 Linux for a Pentester 💀 "Theory is great, but the shell is where the magic happens." This repository is a curated collection of Linux command notes built from real-world labs, CTFs, and hands-on practice. No fluff, just the raw commands and practical notes needed for a Pentester. 📂 Repository...

awesome-hex-editors

awesome-hex-editors A curated and enriched list of awesome hexadecimal editors for Windows, macOS, and Linux. Hex Editors All programs listed bellow have the basic capabilities expected from an hex editor such as viewing, editing, and searching. The number of highlight tags in this list is not a...