Dirty-Pipe-Oneshot

Dirty-Pipe-Oneshot CVE-2022-0847（又名 Dirty Pipe）的编译版本。只需一击即可获得 root 权限 :D 只需编译 cve-2022-0847.c 文件 root@kitploit: gcc cve-2022-0847.c -o getroot 然后在目标机器上执行并获取 root 权限 :D root@kitploit: ./getroot /etc/passwd 1 ootz: 祝你 Root 愉快 🎭...

RootRemover

!WARNING Only use this on systems you own or have authorisation to test. RootRemover CVE-2026-31431 Temporarily removes the root password, uses CVE-2026-31431 to allow architecture-independent escalation to root without knowing the current user's password. Please use responsibly, only on systems...

CVE-2022-0847

CVE-2022-0847 直接移除root账户密码的CVE-2022-0847漏洞利用程序 使用方法： 1. gcc cve-2022-0847.c -o exploit 2. ./exploit 需求： gcc 工作原理简介： Max Kellermann的传统经典漏洞利用POC用于添加一个具有root权限的用户，但在此POC利用程序中，它通过修改/etc/passwd文件 root❌0:0:root:/root:/bin/bash 来移除root账户的密码。 代码相关细节： 我为此写了一篇博客，请阅读。...

EUVD-2020-12559

Malware in sbrugna...

EUVD-2020-12563

Malware in sbrugna...

Design/Logic Flaw

A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating...

CVE-2019-19351

An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/jenkins. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges...

CVE-2015-3246

libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service inconsistent file state by causing an error during the modification. NOTE: this issue can be combined wi...