-
d466fbfdcb
docs: cache-bust og:image to ?v=2 (force fresh card past Cloudflare/social cache)
main
Kara Zajac
2026-07-13 17:27:15 -04:00
-
a8bc81c54c
docs: regenerate og.png with skeletonkey.netslum.io URL
Kara Zajac
2026-07-13 17:25:55 -04:00
-
b7027a1749
docs: point OG/canonical URLs to skeletonkey.netslum.io (new home)
Kara Zajac
2026-07-13 17:15:53 -04:00
-
03324c8542
modules: add ghostlock (CVE-2026-43499, "GhostLock" rtmutex/futex requeue-PI stack UAF)
v0.9.13
KaraZajac
2026-07-13 15:43:00 -04:00
-
95589e26cb
modules: add bad_epoll (CVE-2026-46242, "Bad Epoll" epoll teardown race UAF)
v0.9.12
KaraZajac
2026-07-04 19:35:33 -04:00
-
4d0a0e2443
modules: add nft_catchall (CVE-2026-23111, nf_tables catch-all abort UAF)
v0.9.11
KaraZajac
2026-06-08 17:42:19 -04:00
-
050731396d
docs: record partial VM verification of cifswitch (CVE-2026-46243)
KaraZajac
2026-06-08 13:53:29 -04:00
-
ada56b0db3
modules: add cifswitch (CVE-2026-46243, Asim Manizada's CIFSwitch)
v0.9.10
KaraZajac
2026-06-08 11:07:27 -04:00
-
28a9289989
fix: normalize CVE_METADATA.json to sorted order (drift-check)
v0.9.9
KaraZajac
2026-06-08 10:30:25 -04:00
-
e457b22c1f
release v0.9.9: install.sh needs no sudo + CVE metadata drift fix
KaraZajac
2026-06-08 10:16:24 -04:00
-
60579f1602
release v0.9.8: two new LPE modules (ptrace_pidfd, sudo_host)
v0.9.8
KaraZajac
2026-06-02 09:03:05 -04:00
-
dd5f4fa06d
modules: add sudo_host (CVE-2025-32462, Stratascale sudo --host policy bypass)
KaraZajac
2026-06-02 08:43:09 -04:00
-
3d9db6b93e
tests: add ptrace_pidfd (CVE-2026-46333) detect() coverage
KaraZajac
2026-06-02 08:29:10 -04:00
-
bd63aabd64
modules: add ptrace_pidfd (CVE-2026-46333, Qualys ptrace/pidfd_getfd cred-steal)
KaraZajac
2026-06-02 08:26:24 -04:00
-
1663df69d1
release v0.9.7: kernel_range drift fix + CI Node 24 readiness
v0.9.7
KaraZajac
2026-06-01 11:55:31 -04:00
-
6c148e276a
ci: bump actions/checkout v4 -> v6 (Node 24 readiness)
KaraZajac
2026-06-01 11:40:05 -04:00
-
35c33df16f
fragnesia: add 5.10.257 kernel_range entry (Debian bullseye backport)
KaraZajac
2026-06-01 11:05:05 -04:00
-
25c2afc3e9
release v0.9.6: --auto no longer prompts for sudo password
v0.9.6
KaraZajac
2026-05-28 21:50:26 -04:00
-
13fbbce618
release v0.9.5: kernel_range drift cleanup (12 modules)
v0.9.5
KaraZajac
2026-05-28 14:51:15 -04:00
-
bb5ca48fe1
ci: enable workflow_dispatch on build workflow
KaraZajac
2026-05-28 13:37:35 -04:00
-
4454d8148e
release v0.9.4: drift unblock, fragnesia range fix, infra docs
v0.9.4
KaraZajac
2026-05-28 13:33:28 -04:00
-
fa0228df9b
release v0.9.3: CVE metadata refresh (KEV 10→12) + dirtydecrypt bug fix
v0.9.3
KaraZajac
2026-05-24 01:17:58 -04:00
-
d52fcd5512
docs: sweep stale counts to match v0.9.2 binary state
KaraZajac
2026-05-24 00:09:21 -04:00
-
66cca39a55
release v0.9.2: dirtydecrypt verified on mainline 6.19.7 (22 → 28)
v0.9.2
KaraZajac
2026-05-24 00:03:35 -04:00
-
92396a0d6d
tests: fix 2 test rows with wrong expected verdicts (v0.9.0 regression)
KaraZajac
2026-05-23 23:38:55 -04:00
-
8ac041a295
release v0.9.1: VM verification sweep 22 → 27
v0.9.1
KaraZajac
2026-05-23 23:35:02 -04:00
-
270ddc1681
verify-vm: per-module provisioner hook + old-mainline URL fallback
KaraZajac
2026-05-23 22:36:02 -04:00
-
7f4a6e1c7c
pintheft: drop --full-chain stub (calls undefined finisher symbol)
v0.9.0
KaraZajac
2026-05-23 22:22:31 -04:00
-
f41eed834e
pintheft: add missing <sys/mman.h> for mmap/mprotect/PROT_*
KaraZajac
2026-05-23 22:19:59 -04:00
-
d84b3b0033
release v0.9.0: 5 gap-fillers — every year 2016 → 2026 now covered
KaraZajac
2026-05-23 22:15:44 -04:00
-
4af82b82d9
docs: post-v0.7.1 surface sync (README + site + ROADMAP)
KaraZajac
2026-05-23 21:27:23 -04:00
-
c12ee6055c
release.yml: arm64-static via dockcross/linux-arm64-musl
v0.7.1
KaraZajac
2026-05-23 21:17:03 -04:00
-
3e9f373751
release.yml: arm64-static — give musl-gcc access to Linux uapi headers
KaraZajac
2026-05-23 21:15:01 -04:00
-
24c2821ae2
release.yml: arm64-static via musl-tools on ubuntu-24.04-arm (not Alpine)
KaraZajac
2026-05-23 21:13:06 -04:00
-
5d48a7b0b5
release v0.7.1: arm64-static binary + per-module arch_support
KaraZajac
2026-05-23 21:10:54 -04:00
-
18fa3025f2
ci: silence Annex K noise from clang-tidy
KaraZajac
2026-05-23 20:58:03 -04:00
-
5b79b23ff2
ci: ASan/UBSan + clang-tidy lint + weekly drift check
KaraZajac
2026-05-23 20:46:27 -04:00
-
264759832a
release v0.7.0: 22-of-26 VM-verified + --explain + OPSEC + KEV metadata
v0.7.0
KaraZajac
2026-05-23 20:44:45 -04:00
-
6e0f811a2c
README + site + binary: surface 22-of-26 VM-verified count
KaraZajac
2026-05-23 18:03:38 -04:00
-
312e7d89b5
verify-vm: kernel.ubuntu.com mainline integration — 22 modules verified
KaraZajac
2026-05-23 17:35:13 -04:00
-
2c131df1bf
verify-vm sweep complete: 18 modules confirmed across 5 Linux distros
KaraZajac
2026-05-23 16:29:50 -04:00
-
48d5f15828
verify-vm sweep: 13 modules confirmed end-to-end + Vagrant fixes
KaraZajac
2026-05-23 16:22:10 -04:00
-
67d091dd37
verified_on table — 5 modules empirically confirmed in real VMs
KaraZajac
2026-05-23 15:46:14 -04:00
-
f792a3c4a6
verify-vm: close the loop — first successful end-to-end VM verification
KaraZajac
2026-05-23 15:26:51 -04:00
-
2c4cde1031
verify-vm: fix Vagrantfile for first real run
KaraZajac
2026-05-23 14:59:10 -04:00
-
5071ad4ba9
site: marketing-grade redesign with --explain showcase + animated hero
KaraZajac
2026-05-23 11:42:56 -04:00
-
554a58757e
tools/verify-vm: turnkey Vagrant + Parallels verification scaffolding
KaraZajac
2026-05-23 11:19:28 -04:00
-
8ab49f36f6
detection rules: complete sigma/yara/falco coverage across the corpus
KaraZajac
2026-05-23 11:10:54 -04:00
-
ee3e7dd9a7
skeletonkey: --explain MODULE — single-page operator briefing
KaraZajac
2026-05-23 10:49:46 -04:00
-
39ce4dff09
modules: per-module OPSEC notes — telemetry footprint per exploit
KaraZajac
2026-05-23 10:45:38 -04:00
-
e4a600fef2
module metadata: CWE + ATT&CK + CISA KEV triage from federal sources
KaraZajac
2026-05-23 10:38:01 -04:00
-
60d22eb4f6
core/host: add meltdown_mitigation passthrough + migrate entrybleed
KaraZajac
2026-05-23 01:14:38 -04:00
-
e2fef41667
.gitignore: add /skeletonkey-test-kr (new kernel_range unit-test binary)
KaraZajac
2026-05-23 01:09:40 -04:00
-
8243817f7e
test harness: kernel_range unit tests + coverage report + register_all helper
KaraZajac
2026-05-23 01:09:30 -04:00
-
8de46e212e
kernel_range: refresh tables from Debian tracker — 5 MISSING adds + 4 off-by-one harmonisations
KaraZajac
2026-05-23 00:58:04 -04:00
-
df4b879527
tools: refresh-kernel-ranges.py — Debian tracker drift detection
KaraZajac
2026-05-23 00:52:10 -04:00
-
6b6d638d98
.gitignore: exclude release build artifacts at repo root
KaraZajac
2026-05-23 00:47:25 -04:00
-
8938a74d04
detection rules: YARA + Falco for the 6 highest-rank modules + playbook
KaraZajac
2026-05-23 00:47:13 -04:00
-
027fc1f9dd
release.yml: add static-musl x86_64 build (Alpine)
KaraZajac
2026-05-23 00:30:13 -04:00
-
72ac6f8774
install.sh: prefer x86_64-static binary by default (portable across libc versions)
v0.6.2
KaraZajac
2026-05-23 00:28:36 -04:00
-
fde053a27e
install.sh: POSIX-compatible 'set -o pipefail' so 'curl | sh' works
v0.6.1
KaraZajac
2026-05-23 00:24:58 -04:00
-
97be306fd2
release: bump version to v0.6.0
v0.6.0
KaraZajac
2026-05-23 00:22:18 -04:00
-
a9c8f7d8c6
tests: 5 happy-path VULNERABLE assertions (44 total)
KaraZajac
2026-05-23 00:17:17 -04:00
-
150f16bc97
pwnkit + sudoedit_editor: ctx->host migration + 4 more tests (39 total)
KaraZajac
2026-05-23 00:15:01 -04:00
-
c63ee72aa1
docs: JSON output schema (consumer contract for --scan --json)
KaraZajac
2026-05-23 00:07:45 -04:00
-
86812b043d
core/host: userspace version fingerprint (sudo, polkit)
KaraZajac
2026-05-23 00:05:39 -04:00
-
0d87cbc71c
copy_fail_family: bridge-level userns gate + 4 new tests (33 total)
KaraZajac
2026-05-23 00:02:23 -04:00
-
2b1e96336e
core/host: in_range helper + 13-module migration + 12 more tests (29 total)
KaraZajac
2026-05-22 23:58:38 -04:00
-
1571b88725
core/host: skeletonkey_host_kernel_at_least + 9 new detect() tests
KaraZajac
2026-05-22 23:52:10 -04:00
-
36814f272d
modules: migrate remaining 22 modules to ctx->host fingerprint
KaraZajac
2026-05-22 23:43:20 -04:00
-
d05a46c5c6
.gitignore: exclude skeletonkey-test build artifact
KaraZajac
2026-05-22 23:32:23 -04:00
-
ea1744e6f0
tests: detect() unit harness with mocked ctx->host
KaraZajac
2026-05-22 23:32:12 -04:00
-
c00c3b463a
dispatcher: per-detect timeout + exploit() fork-isolation
KaraZajac
2026-05-22 23:26:09 -04:00
-
4f30d00a1c
core/host: shared host fingerprint refactor
KaraZajac
2026-05-22 23:18:00 -04:00
-
3e6e0d869b
skeletonkey: add --dry-run flag
KaraZajac
2026-05-22 23:08:24 -04:00
-
a26f471ecf
dirtydecrypt + fragnesia: pin CVE fix commits, version-based detect()
KaraZajac
2026-05-22 23:06:15 -04:00
-
cdb8f5e8f9
all modules: wrap Linux-only code in #ifdef __linux__ — full macOS build works
KaraZajac
2026-05-22 22:58:16 -04:00
-
9a4cc91619
pack2theroot (CVE-2026-41651) + --auto accuracy work
KaraZajac
2026-05-22 22:42:07 -04:00
-
ac557b67d0
review pass: fidelity + credits + count consistency for ported modules
KaraZajac
2026-05-22 18:41:37 -04:00
-
a8c8d5ef1f
modules: add dirtydecrypt (CVE-2026-31635) + fragnesia (CVE-2026-46300)
KaraZajac
2026-05-22 18:22:30 -04:00
-
3b287f84f0
copy_fail_family: skip DIRTYFAIL typed prompt under --i-know
KaraZajac
2026-05-22 16:49:15 -04:00
-
33f81aeb69
site: revert CVE table → pill grid
KaraZajac
2026-05-17 02:25:25 -04:00
-
5be3c46719
CONTRIBUTING: fix stale IAMROOT_EXPLOIT_OK → SKELETONKEY_EXPLOIT_OK
KaraZajac
2026-05-17 02:24:06 -04:00
-
58fb2e0951
site: simplify nav + add sortable CVE chart
KaraZajac
2026-05-17 02:22:54 -04:00
-
2904fa159c
site: GitHub Pages landing page
KaraZajac
2026-05-17 02:14:15 -04:00
-
2873133852
README: polish — accurate counts, audience table, corpus glance
KaraZajac
2026-05-17 02:02:50 -04:00
-
95135213e5
launch: README polish + CONTRIBUTING + LAUNCH.md
KaraZajac
2026-05-17 01:59:25 -04:00
-
0fbe1b058f
v0.5.0: --auto mode + sysadmin one-liner
v0.5.0
KaraZajac
2026-05-17 01:55:13 -04:00
-
e13edd0cfd
modules: add sudo_samedit + sequoia + sudoedit_editor + vmwgfx
KaraZajac
2026-05-17 01:53:18 -04:00
-
5a73565e0e
scaffold: 4 new module dirs (sudo_samedit, sequoia, sudoedit_editor, vmwgfx)
KaraZajac
2026-05-17 01:47:28 -04:00
-
324b539d65
README: bump Status to v0.4.5
KaraZajac
2026-05-16 23:09:19 -04:00
-
e668c3301f
banner: drop ASCII art, plain text only
v0.4.5
KaraZajac
2026-05-16 23:05:40 -04:00
-
347a9af832
banner: give the bit actual teeth
v0.4.4
KaraZajac
2026-05-16 23:04:14 -04:00
-
023289a03a
banner: artwork is the focal point — plain SKELETONKEY text below
v0.4.3
KaraZajac
2026-05-16 23:01:14 -04:00
-
e7ced5db7c
banner: more detailed ornate skeleton key
v0.4.2
KaraZajac
2026-05-16 22:57:01 -04:00
-
b5188b7818
banner: redesign skeleton key ASCII art
v0.4.1
KaraZajac
2026-05-16 22:52:13 -04:00
-
9593d90385
rename: IAMROOT → SKELETONKEY across the entire project
v0.4.0
KaraZajac
2026-05-16 22:43:49 -04:00
-
9d88b475c1
v0.3.1: --dump-offsets tool + NOTICE.md per module
v0.3.1
KaraZajac
2026-05-16 22:33:43 -04:00
-
1bcfdd0c9f
release: v0.3.0 — 4 new CVE modules (24 total)
v0.3.0
KaraZajac
2026-05-16 22:25:15 -04:00
-
5a808e3583
modules: 4 new CVE modules — nft_set_uaf + af_unix_gc + nft_fwd_dup + nft_payload
KaraZajac
2026-05-16 22:24:15 -04:00