CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

copy-fail-checker

Comprobador de Copy Fail — CVE-2026-31431 Un pequeño script Bash con pocas dependencias que te indica si tu sistema Linux está expuesto a la vulnerabilidad de escalada de privilegios local Copy Fail CVE-2026-31431. El script es de solo lectura : nunca explota el fallo, nunca carga módulos del...

CVE-2022-0847_DirtyPipeExploit

What is this This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite root's password field in /etc/passwd and restore after popping a root shell. Side Note: I do not claim any credit for finding this vulnerability or writing the proof of concept. This exploit is merely...

TowelRoot

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another...

CVE-2026-46331

CVE-2026-46331 - "pedit COW" Vulnerability Assessment & Mitigation Guide Este repositorio contiene herramientas administrativas básicas para verificar la exposición y aplicar mitigaciones temporales contra la vulnerabilidad de escalada de privilegios locales CVE-2026-46331 conocida como "pedit CO...

CVE-2022-36946

CVE-2022-36946 Reportado por: Domingo Dirutigliano y Nicola Guerrera Mientras trabajábamos en firegex, nuestro firewall de aplicación para competiciones CTF Attack-Defence, nos topamos con algunos kernel panics. Este extraño comportamiento fue luego aislado y analizado, llevando al descubrimiento...

linux-4.19.72_CVE-2019-19447

This repository does not have a README...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits A collection of exploits and documentation for penetration testers and red teamers that can be used to aid the exploitation of the Linux Dirty Pipe vulnerability. About The Vulnerability Dirty Pipe CVE-2022-0847 is a local privilege escalation vulnerability in the...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...

CVE-2026-31431-Copy-Fail

CVE-2026-31431: When the Copy Isn’t a Copy and the Failure Comes Too Late Artifacts and scripts for the CopyFail writeup. The deep-dive walkthrough: https://4xura.com/binex/kernel/copy-fail/ Layout proof-of-concept/ contains the primitive-only demos used in the writeup. exploit-scripts/ contains...

exploiting-cve-2017-5123

Exploiting CVE-2017-5123 Introduction This repository is an addition to the article published in MISC Magazine 96. We achieved to elevate our privileges in a reliable way, on our virtual machine with SMEP / SMAP and KASLR enabled. It should however be noted that the system if left in an unstable...

CHARON

root@kitploit: / || | | | / \ | \ / | \ | | | | | || | / \ | | | | | | | | | | | |/ | "It is a fearful thing to fall into the hands of the living God." — Hebrews 10:31 What this is A tight, dependency-free PoC for CVE-2026-46333 : the ptracemayaccess mm==NULL bypass disclosed by Qualys on...

CVE-2024-1086-Exploit

🔒 CVE-2024-1086 Exploit Project 🛡️ Polished educational Linux kernel exploit for security research This project provides a robust, non-functional template for studying CVE-2024-1086, a use-after-free vulnerability in the Linux kernel's netfilter: nftables component, enabling local privilege...

CVE-2023-2598

CVE-2023-2598 Escalada de privilegios A través de CVE-2023-2598, comprender los mecanismos de Compound Page y folio en Linux, y posteriormente ver si se puede completar la explotación del 1day CVE-2023-6560. Compound Pagehuge page La memoria es cada vez mayor, pero la unidad básica de asignación ...

AutoLocalPrivilegeEscalation

AutoLocalPrivilegeEscalation Un script automatizado que descarga posibles exploits para el kernel de Linux desde exploitdb y los compila automáticamente. Este script fue creado gracias a Hackademics, hay tantos posibles exploits para esa versión del kernel que, como estudiante novato de OSCP, no...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. root@kitploit: $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

ved-ebpf

VED-eBPF: Kernel Exploit and Rootkit Detection using eBPF VED Vault Exploit Defense-eBPF leverages eBPF extended Berkeley Packet Filter to implement runtime kernel security monitoring and exploit detection for Linux systems. Introduction eBPF is an in-kernel virtual machine that allows code...

ved-ebpf

VED-eBPF: Detección de Exploits y Rootkits del Kernel usando eBPF VED Vault Exploit Defense-eBPF aprovecha eBPF extended Berkeley Packet Filter para implementar monitoreo de seguridad del kernel en tiempo de ejecución y detección de exploits para sistemas Linux. Introducción eBPF es una máquina...

CVE-2026-28867-PoC

CVE-2026-28867 How it works The vulnerability exists because the kernel implementation of tcpsysctlinfo performs a global lookup for the connection without verifying that the calling process either owns the socket or possesses elevated privileges like root. Impact An unprivileged attacker can...