~/hackyfeed $

Chronomaly is a kernel exploit targeting CVE-2025-38352, facilitating persistent root access on LG webOS Smart TVs running kernel version 5.4.268 on ARM64 architectures. It features an automated exploit chain that leverages novel techniques, including a redesigned write primitive and non-destructive pipe reads, ensuring reliability on physical hardware through advanced race condition manipulations. The exploit has been validated across multiple TV models and firmware versions, and was disclosed responsibly to LG's Security Researcher Program.

The "benchmark-privesc-linux" tool provides a comprehensive benchmarking environment for testing Linux privilege escalation vulnerabilities, where a low-privilege user attempts to gain root access. It offers both virtual machine and Docker container setups for testing various single-step privilege escalation scenarios in an isolated manner, ensuring security and reproducibility. Key features include customizable vulnerability scenarios, support for running tests in both VMs and Docker, and complete open-source access for academic and experimental use.

The Awesome Windows Red Team repository is a comprehensive collection of resources tailored for Red Team professionals engaging in Windows environments. It encompasses a wide variety of materials including tools, books, courses, and techniques focused on topics such as Active Directory exploitation, lateral movement, privilege escalation, and defense evasion strategies. Notable features include structured categories for efficient navigation, making it suitable for users ranging from beginners to advanced practitioners.

asroot is a utility designed to run specified commands with root user privileges after prompting for the user's password. It ensures a secure execution environment by sanitizing and updating environment variables, with an option to preserve the original environment. The tool is restricted to users in the wheel group, reinforcing access control measures for executing high-privilege commands.

The Archive is a continually evolving repository that curates hacking methodologies, cheatsheets, and conceptual breakdowns, specifically designed to be a human-curated alternative to the increasing reliance on LLMs. Its primary use case is to provide easily accessible, spell-checked information along with referenced content derived solely from clear-net sources. Notable features include the inclusion of alternative resources with descriptions, page differentiation for talk notes, and plans for future enhancements such as a public REST API for querying the data.

AIO-Pentesting is a comprehensive resource for penetration testers, encapsulating various methodologies, tools, and commands necessary for conducting thorough security assessments. It categorizes content into phases, covering pre-intrusion and intrusion techniques for both Linux and Windows environments, along with additional materials such as notes for certifications like OSCP and OSWE. Notable features include organized documentation on common pentesting stages, forensics, and various exploitation techniques, as well as links to essential vulnerability databases and binary libraries.

Zombie Ant Farm is a toolset designed for offensive security practitioners to enhance evasion techniques against Linux Endpoint Detection and Response (EDR) systems. Its primary use case involves facilitating the development of custom offensive strategies through features such as distributed payload warehousing, in-memory payload delivery, and ASLR weakening shims, making it suitable for advanced penetration testing and research. The kit includes various components such as preloaders, evasion primitives, and a warehouse service, providing a modular approach to offensive operations.

Soapy is a post-exploitation tool designed to facilitate stealthy operations within a compromised system by creating a container that hosts a root terminal shell while monitoring and scrubbing log files. Its primary use case involves executing commands to extract sensitive information such as hashes and IP addresses, map the network, and perform other tasks without detection. Notable features include the ability to specify custom log file paths, delete files from specified directories post-session, and operate with minimal user prompts.

RSPET (Reverse Shell and Post Exploitation Tool) is a Python-based framework designed for executing remote commands and facilitating post-exploitation activities in penetration testing scenarios. Notable features include TLS encryption for secure server-client communication, built-in file and binary transfer capabilities, support for managing multiple hosts, and a modular code design that allows for extensive customization and plug-in management through a RESTful API.

punk.py is a post-exploitation tool designed for network pivoting from compromised Unix systems, facilitating the collection of usernames, SSH keys, and known hosts to establish SSH connections across discovered combinations. It supports both Python 2 and 3, features options for custom execution, password bypass, command execution with sudo, and the capability to crack hashed known hosts, making it versatile for penetration testing and exploitation scenarios.

The "presentations" repository contains a collection of PDF files showcasing various presentations. Its primary use case is to serve as a portfolio of educational content, presumably focused on cybersecurity topics. Notable features include accessibility as PDFs, allowing for easy distribution and review of the material.

A modular pentesting framework implemented in C

PostShell is a post-exploitation tool designed to facilitate advanced shell access through both bind and backconnect methods, enabling attackers to maintain an interactive TTY session with job control while remaining stealthy. Notably, it features cloaked process names to minimize detection, a compact stub size of less than 14kb for easy deployment on Unix-like systems, and built-in anti-debugging mechanisms to enhance resilience against analysis. The tool's design allows for operation in environments with limited dependencies, improving post-exploitation flexibility.

The Post-Exploitation tool facilitates advanced post-exploitation tasks within PowerShell environments, primarily aimed at improving threat actor capabilities during penetration testing and red teaming exercises. Notable features include modular payload execution, session management, and comprehensive system enumeration capabilities to leverage discovered information effectively.

Poet is a post-exploitation tool that facilitates remote control and management of compromised machines through a client-server architecture. It allows attackers to perform various operations on the target, such as reconnaissance, file exfiltration, remote execution, and self-destruction of the client. Notable features include a control shell for executing commands, automatic reconnection capabilities, and the ability to remove traces post-exploitation.

The msf-auxiliarys repository contains a collection of custom Metasploit auxiliary post-modules designed for post-exploitation tasks. Its primary use case is to enhance the capabilities of Metasploit by providing additional functionalities that facilitate common post-exploitation procedures. Notable features include ease of installation and integration with the Metasploit database, making it a valuable resource for security professionals.

MacOS-WPA-PSK is a proof-of-concept script that demonstrates how macOS stores the wireless network key in plaintext within NVRAM, rendering it accessible without root privileges. This tool highlights the risks associated with the management of sensitive credentials in macOS, serving as a reminder that users should be aware of the non-secure treatment of such information. The script operates using Python and has been tested across specific versions of macOS.

LinPwn is an interactive post-exploitation tool designed for enumerating information and facilitating privilege escalation on compromised Linux machines. Key features include executing shells, reading files, running scripts like LinEnum.sh for enumeration, downloading files, and extracting system password hashes and saved Wi-Fi credentials. This tool is essential for security professionals conducting penetration tests to assess vulnerabilities post-exploitation.

The LDAP-credentials-collector-backdoor-generator is a malicious tool designed to create backdoor scripts that log LDAP user credentials during HTTP basic authentication. Its primary use case involves injecting the generated backdoor into a target web application to capture sensitive username and password information from users who access the site. Notable features include customizable backdoor filename generation and the ability to store captured credentials in a file for easy retrieval by the attacker.

A flexible cross-platform post-exploitation agent written in Go with basic functionalities

Efes is a proof-of-concept tool that utilizes built-in speech recognition to detect and record specific keywords from spoken audio, saving the snippets for potential exfiltration. Its primary use case is in post-exploitation scenarios where capturing high-value data passively is critical. Notably, it records only short audio segments to minimize file size while focusing on relevant information.

Ed is a tool designed for identifying and exploiting accessible UNIX Domain Sockets, particularly useful for locating exposed Docker.sock instances that may not be mounted in their default locations. Notable features include the ability to hunt for various types of UNIX domain sockets, perform autopwn actions, and return output in JSON format, making it suitable for both security testing in DevOps processes and integration into CI/CD pipelines.

DNS-Persist is a post-exploitation agent utilizing DNS for command and control, primarily designed for persistence in compromised systems. It features multiple persistence mechanisms including LogonScript, RunKey, and Excel Addin persistence, as well as the ability to execute commands via a pseudo-interactive shell and inject 32-bit shellcode. The tool is built with a Python server-side and a C++ agent, with plans for future enhancements including additional persistence options and encryption capabilities.

Credit-Card-Bruteforcer is a security testing tool designed to exploit vulnerabilities in credit card systems by attempting to generate valid Primary Account Numbers (PAN) using partial hashes and a set of random PINs. The tool's primary use case is to assess the strength of credit card security measures, while its intentionally incomplete functionality indicates it is intended for educational or testing purposes rather than practical exploitation.

Auto-PostXploit is a Windows post-exploitation tool designed for Red Team operations, facilitating immediate system reconnaissance following an exploit. Its primary use case involves executing post-exploitation actions on compromised systems using Meterpreter, enabling security professionals to gather critical system information efficiently. Notable features include the ability to upload and execute scripts on target systems and automate information gathering, aiding in the assessment of security postures.