GameOverlayFS

This script exploit the CVE-2023-2640 and CVE-2023-32629 for vulnerability on OverlayFS that affected some versions of Ubuntu. Tested on Ubuntu 20.04 with kernel 5.4.0. How to Use Download the file Gameoverlay.sh and, using a regular user not root, change the permissions for execution: chmod +x...

lava

LAVA: Large Scale Automated Vulnerability Addition Evaluating and improving bug-finding tools is currently difficult due to a shortage of ground truth corpora i.e., software that has known bugs with triggering inputs. LAVA attempts to solve this problem by automatically injecting bugs into...

raven

Raven CobaltStrike External C2 for Websockets Additional info: https://www.cobaltstrike.com/help-externalc2 Server Build Ubuntu Copy the server folder to your VPS. Run ./setup.sh as root or with sudo Client build Windows Copy the client folder to a Windows development host. Install the Windows 10...

check_CVE-2019-3462

Check @Debian and @Ubuntu GNU / Linux for CVE-2019-3462 in APT...

security_monkey

NOTE: Security Monkey is in maintenance mode and will be end-of-life in 2020. For AWS users, please make use of AWS Config. For GCP users, please make use of Cloud Asset Inventory. Security Monkey Security Monkey monitors your AWS and GCP accounts for policy changes and alerts on insecure...

pyrdp

PyRDP PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs plaintext credentials or NetNTLM hashes used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the...

spraykatz

Spraykatz Spray love around the world Index Title| Description ---|--- About| Brief Description about the tool Installation| Installation and Requirements Usage| How to use Spraykatz Changelog| Spraykatz changelog Acknowlegments| Acknowlegments About Spraykatz is a tool without any pretention abl...

CVE-2026-3888

CVE-2026-3888 - snap-confine + systemd-tmpfiles Local Privilege Escalation Disclaimer: This repository is for educational purposes only. All content is based on the original security advisory published by Qualys on March 17, 2026. The vulnerability has been patched-always ensure your systems are ...

CVE-2018-1000001

glibc - 'getcwd' Local Privilege Escalation Attention: All rights to the exploit writer. I have just compiled and organized a repository for this CVE. CVE: 2018-1000001 Alias: RationalLove exploit-debian - Exploit compiled in debian x64 exploit-ubuntu - Exploit compiled in ubuntu x64 Am I...

needrestart

needrestart About needrestart checks which daemons need to be restarted after library upgrades. It is inspired by checkrestart from the debian-goodies package. There are some hook scripts in the ex/ directory to be used with apt and dpkg. The scripts will call needrestart after any package...

ad-honeypot-autodeploy

ad-honeypot-autodeploy Deploy a small, intentionally insecure, vulnerable Windows Domain for RDP Honeypot fully automatically. Runs on self-hosted virtualization using libvirt with QEMU/KVM but it can be customized easily for cloud-based solutions. Used for painlessly set up a small Windows Domai...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...

CVE-2026-31431

CVE-2026-31431 Overview This repository is created for educational and research purposes only. It is intended to help understand the behavior, impact, and security considerations related to CVE-2026-31431 in a controlled lab environment. The content in this repository must only be used on systems...

Ubuntu-CVE-2026-3888-patcher

🛡️ CVE-2026-3888 Remediation Script Many Hat Group Security Advisory Tool Overview This script has been developed by Many Hat Group to quickly identify and remediate systems affected by CVE-2026-3888 on Ubuntu environments. It is designed for use across managed fleets, providing: Automated...

instantbox

En | 简 | 繁 instantbox Get a clean, ready-to-go Linux box in seconds. Introduction What is instantbox? It's a project that spins up temporary Linux systems with instant webshell access from any browser. What can an instantbox do? 1. provides a clean Linux environment for a presentation 2. let...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

kurukshetra

Kurukshetra Kurukshetra is a web framework that’s developed with the aim of being the first open source framework which provides a solid foundation to host reasonably complex secure coding challenges while still providing the ability to efficiently and dynamically execute each challenge on the...

CVE-2017-16995

Vulnerability Description Ubuntu is an open-source GNU/Linux operating system primarily used on desktops, based on Debian GNU/Linux. Recently, a white-hat hacker disclosed a local privilege escalation vulnerability in the latest version of Ubuntu Ubuntu 16.04, assigned CVE-2017-16995. This...

Pwnkit-CVE-2021-4034-LPE

Pwnkit - CVE-2021-4034 Local Privilege Escalation Tested On OS: Ubuntu 20.04 pkexec: 0.105 PoC: gcc pwnkit.c -o exploit && ./exploit Vulnerability CVE: CVE-2021-4034 Affected Component: pkexec Vulnerability Type: Local Privilege Escalation...

difuze

difuze: Fuzzer for Linux Kernel Drivers This repo contains all the sources including setup scripts, you need to get difuze up and running. Tested on Ubuntu = 14.04.5 LTS 0. Running difuze from Docker Refer the readme As explained in our paper, There are two main components of difuze: Interface...