# mufeedvh/moonwalk

Cover your tracks during Linux Exploitation by leaving zero traces on system logs and filesystem timestamps.

Repository: https://github.com/mufeedvh/moonwalk
Canonical: https://ross.abutalabs.com/products/moonwalk
Language: Rust
License: MIT
License Family: permissive
Topics: security, security-tools, redteam, red-teaming, redteam-tools, infosec, infosectools, linux, exploit, exploitation, cve, privilege-escalation
Last push: 2022-10-08T05:05:36+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 1718, "days_push": 1425, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1488, forks 134 (observed 2026-08-28T04:04:52.194745+00:00)

## What it is
moonwalk is a single-binary Rust CLI tool that covers tracks during Linux penetration testing by saving and reverting system log state, shell history, and filesystem timestamps. It is intended for authorized red team operations, leaving zero traces of activity on a target Unix machine.

## Use cases
- clear system logs after linux exploitation
- revert filesystem timestamps during pentest
- hide shell history on a compromised machine
- red team anti-forensics on unix
- cover tracks during privilege escalation testing
- remove traces of my session on a target host

## When to choose
- you are doing authorized red team or penetration testing on Linux and need to revert logs, history, and timestamps
- you want a small single-binary tool you can fetch with curl to a target machine
- you need fast, low-footprint trace clearing during an engagement

## When to avoid
- you do not have explicit permission to test the target machine
- you need defensive log integrity or audit tooling rather than log removal
- you are working on non-Unix platforms like Windows or macOS

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: security, logging, cli
- domain: security, penetration-testing
- platform: cli
- tags: red-team, log-clearing, anti-forensics, timestamp-tampering, penetration-testing, offensive-security, command-line, linux

## Member repositories
- mufeedvh/moonwalk (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:52.194745+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:33:45.170145+00:00, confidence not recorded.
  - readme: https://github.com/mufeedvh/moonwalk (fetched 2026-08-28T04:04:52.194745+00:00, sha 620a479530be)
- Data as of 2026-08-30T08:39:29.467469+00:00.