
tech
Furtex: Linux Exploitation Toolkit Hits GitHub
Furtex, a new Linux exploitation and evasion toolkit, has landed on GitHub. This toolkit leverages io_uring and eBPF to provide researchers and security teams with advanced capabilities for post-exploitation activities and evasion techniques. It's built without any libraries like liburing or frameworks, relying solely on raw syscalls for maximum flexibility and control.
Developers and security professionals working in environments requiring deep Linux kernel understanding will find Furtex invaluable. The toolkit supports various kernel versions starting from 5.4, with specific features enabled as the version increases. For instance, IORING_OP_SOCKET is available only on kernels 5.19 or later.
Furtex includes over 75 tools split between root and unprivileged user contexts, covering file operations, network connections, memory manipulation, and more. The bpf/ directory alone contains 15 tools requiring CAP_BPF or CAP_NET_RAW capabilities.
Jul 21, 2026 · 3 min read