CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

CVE-2020-27786-Kernel-Exploit

CVE-2020-27786 Kernel Exploit Details You can find full details and explaination here: https://1day.dev/notes/Linux-Kernel-n-day-exploit-development TL;DR The vulnerability is a Race Condition that causes a write Use-After-Free. The race window has been extended using the userfaultd technique...

dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": root@kitploit: echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

eBPF-hid_guard

eBPF-hidguard See Why This Was Archived below. A Linux kernel-space security monitor for detecting and blocking HID injection attacks Rubber Ducky, O.MG Cable, ESP32-based keyboard emulators using eBPF HID-BPF structops. What This Does Malicious HID devices emulate keyboards and inject keystrokes...

CVE-2022-0492-Checker

CVE-2022-0492-Checker A script to check if a container environment is vulnerable to container escapes via CVE-2022-0492 About the vulnerability On Feb. 4 , Linux announced CVE-2022-0492 , a new privilege escalation vulnerability in the kernel. CVE-2022-0492 marks a logical bug in control groups...

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

root@kitploit: Chrono-Drip: Temporal Viscosity Exploitation Framework CVE-2022-0847 Weaponization via Convergent Time Theory CTT ⚠️ DISCLAIMER FOR RESEARCH AND ACADEMIC PURPOSES ONLY This tool demonstrates the application of fundamental physics discoveries to cybersecurity. All work presented here...

dirty-pipe-poc

Dirty Pipe POC CVE-2022-0847 POC - https://dirtypipe.cm4all.com/ Description This exploit attempts to use the CVE-2022-0847 vulnerability to overwrite a read only file. When make exploit is run, it will: 1. Create a readonlyfile.txt 2. Execute the dirtypipe exploit. 3. Check if the dirtypipe...

claude_opus_cve_2023_0266

Demonstration that Claude 3 Opus does not understand CVE-2023-0266 and does not find it Demo 1. Even if told where the bug is Opus does not find it, and hallucinates the presence of lock acquisitions Demo 2. "Prompt engineering" aka telling the LLM exactly how to find the bug also doesn't work De...

SYNwall

SYNwall Zero config IoT firewall. SYNwall is a project built for the time being as a Linux Kernel Module, to implement a transparent and no-config/no-maintenance firewall. You may want to have a look to the for an example of usage. Basics Usually IoT devices are out of a central control, with low...

The vulnerabilities in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel allow a hacker to cause a service failure.

The vulnerability in the net/bluetooth/eir.c and net/bluetooth/mgmt.c modules of Linux kernel systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the aiptekirq() function in the drivers/input/tablet/aiptek.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the aiptekirq function in the drivers/input/tablet/aiptek.c module of the Linux kernel is related to the lack of data validation for data received in interrupt packets from potentially compromised USB devices. Exploiting this vulnerability could allow an attacker to cause...

DirtyPipe-Exploit

CSE 5380: Information Security Paper CVE-2022-0847 Dirty Pipe By Karan Vasudevamurthy UTA ID: 1002164438 What is CVE? Common Vulnerabilities and Exposures CVE is a list of publicly disclosed information security vulnerabilities and exposures. The MITRE corporation introduced CVE in 1999 to identi...

CVE-2022-2586-LPE

CVE-2022-2586-LPE LPE N-day Exploit for CVE-2022-2586: Linux kernel nftobject UAF root@kitploit: gcc exploit.c -o exploit -lmnl -lnftnl -no-pie -lpthread Author: Alejandro Guerrero [email protected] Copyright C 2022 Qualys, Inc...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

CVE-2019-10207

CVE-2019-10207 PoC for CVE-2019-10207 linux kernel: bluetooth: hciuart: kernel NULL pointer dereference root@kitploit: gcc CVE-2019-10207.c -o cve-2019-10207-poc -static test on 4.20.0 kernel compile CONFIG must be opened: root@kitploit: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...

iovyroot

iovyroot A root tool based on the CVE-2015-1805 vulnerability It supports 32 and 64bit but requires absolute kernel addresses see offsets.c poc was done by idler1984 https://github.com/idl3r/testcode...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...