🧰 systemd

The items that name it 18

• Tailworm – Tailscale Vulnerabilities
  writeupas classification.technologies2026-10-25
• LinuxSecurity (@lnxsec) on X
  threadas classification.technologies2026-09-30
• Tracking CVE-2026-73570: unauthenticated command injection on internet-facing mail servers
  writeupas classification.technologies2026-09-30
• archcanary
  repoas affected products2026-08-21

  abused for persistence via services with Restart=always

• armourinfosec/Offensive-Linux-Privilege-Escalation
  repoas affected products2026-08-19

  timers abused for privilege escalation

• Talaria
  repoas classification.technologies2026-07-31
• HackingLZ/gibson
  repoas tools2026-07-22

  Used to run the gibson collect agent as a persistent Linux service (network-monitor.service) with auto-restart

• SleeperGem: Compromised git_credential_manager, Dendreo, and fastlane RubyGems Drop a Persistent Backdoor
  writeupas classification.technologies2026-07-19
• M-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions
  writeupas tools2026-07-14It is written here as systemd (user services).

  Used by the payload to establish persistence on Linux.

• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeupas classification.technologies2026-06-20
• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeupas classification.technologies2026-06-16
• How to Secure a Linux Server
  repoas classification.technologies2026-05-06
• Untangling a Linux Incident With an OpenAI Twist (Part 2)
  writeupas classification.technologies2026-04-22
• Untangling a Linux Incident With an OpenAI Twist
  writeupas classification.technologies2026-04-17
• Detecting insiders on GNU/Linux servers
  writeupas classification.technologies2025-04-21
• tmate - Instant Terminal Sharing (or How To Backdoor a Linux Server)
  writeupas classification.technologies2024-10-06
• Systemd Path Activation - Poor Man's File Integrity
  writeupas tools2024-06-22

  Linux init system providing path units (.path) and service units (.service) used to monitor file/directory changes and trigger scripts

• Dev Machine Guard Now Supports Linux - StepSecurity
  articleas classification.technologies

In every workspace you can read 19