🔒Furtex: Linux Exploitation Toolkit Hits GitHub
New Linux toolkit for red team research just landed on GitHub
TL;DR
Furtex, a post-exploitation and evasion toolkit for Linux, is now available on GitHub. Built around io_uring and eBPF, it's designed for authorized research and red team engagements with no liburing or frameworks used.
Furtex, a new Linux exploitation and evasion toolkit, has landed on GitHub. This toolkit leverages io_uring and eBPF to provide researchers and security teams with advanced capabilities for post-exploitation activities and evasion techniques. It's built without any libraries like liburing or frameworks, relying solely on raw syscalls for maximum flexibility and control. Developers and security professionals working in environments requiring deep Linux kernel understanding will find Furtex invaluable. The toolkit supports various kernel versions starting from 5.4, with specific features enabled as the version increases. For instance, IORING_OP_SOCKET is available only on kernels 5.19 or later. Furtex includes over 75 tools split between root and unprivileged user contexts, covering file operations, network connections, memory manipulation, and more. The bpf/ directory alone contains 15 tools requiring CAP_BPF or CAP_NET_RAW capabilities.
Key Points
Furtex is built around io_uring and eBPF, with no liburing or frameworks used; raw syscalls throughout (15 words)
Requires gcc, clang, make, and linux-headers-$(uname -r) for toolchain setup (20 words)
Kernel version 5.4 required for base io_uring features, while 5.6+ needed for IORING_OP_OPENAT (30 words)
Supports CAP_BPF + CAP_PERFMON split from kernel 5.8 onwards, replacing CAP_SYS_ADMIN for BPF (29 words)
Includes over 75 tools in edrs/ directory, split by privilege: root and unprivileged users (26 words)
Why It Matters
If you're on a red team or conducting authorized security research, Furtex is your new best friend. It's built around io_uring and eBPF for advanced post-exploitation activities and evasion techniques. With over 75 tools split between root and unprivileged contexts, it covers everything from file operations to network connections and memory manipulation. Just make sure you're running the latest kernel versions for full feature support.
Frequently Asked Questions
Why does this matter?
If you're on a red team or conducting authorized security research, Furtex is your new best friend. It's built around io_uring and eBPF for advanced post-exploitation activities and evasion techniques. With over 75 tools split between root and unprivileged contexts, it covers everything from file operations to network connections and memory manipulation. Just make sure you're running the latest kernel versions for full feature support.
What happened?
Furtex, a post-exploitation and evasion toolkit for Linux, is now available on GitHub. Built around io_uring and eBPF, it's designed for authorized research and red team engagements with no liburing or frameworks used.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.