ComoDoS

Technical Details see: https://malwaretech.com/2026/06/exploiting-a-remote-kernel-vulnerability-in-comodo-internet-security.html...

drift-corpus

The Drift Corpus: Ring 0 Drift Corpus is the definitive, open-source repository of Windows Kernel patch diffs. These artifacts are produced using Drift Agent , ByteRay's automatic reverse engineering engine and part of the Argus-Systems platform. With Drift, we have successfully mapped, analyzed,...

ksentinel

ksentinel - Kernel Syscalls Integrity Monitor Overview ksentinel monitors critical kernel functions and the syscall table for unauthorized modifications. It detects common syscalls that are targeted by most rootkits including ftrace hooks, kprobes, and syscall table hijacking. Features Function...

PFQ

PFQ v6.2 Introduction PFQ is a functional framework designed for the Linux operating system built for efficient packets capture/transmission 10G, 40G and beyond, in-kernel functional processing, kernel-bypass and packets steering across groups of sockets/end-points. It is highly optimized for...

fisy-fuzz

FIle SYstem - FUZZer This is the full file system fuzzing framework that I presented at the Hack in the Box 2020 Lockdown Edition conference in April. Conference Talk Conference Talk Single Video Conference Material Goal The goal of this framework is to uncover kernel security bugs on UNIX system...

AndroidKernelVulnerability

Android Kernel Vulnerability Overview In November 2017 a use-after-free bug to linux kernel was detected by syzkaller system. In February 2018 this was patched in some linux kernels and android versions. This fix was never included in Android monthly security bulletins, so it was not patched in...

DriverBuddyReloaded

Driver Buddy Reloaded Table of Contents Driver Buddy Reloaded Table of Contents Installation Quick Usage Advanced Usage About Driver Buddy Reloaded Finding DispatchDeviceControl Labelling WDM and WDF Structures Finding and Decoding IOCTL Codes Flagging Functions Finding DeviceName Dumping Pooltag...

oppo-ghostlock

oppofindN2-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project adapts the...

CVE-2020-15368

How to exploit a vulnerable windows driver Exploit and Proof of Concept PoC for CVE-2020-15368. Asrock repackaged rweverything driver for their RGB controller configuration tool and signed it. They "protect" it by encrypting their ioctls...lol. We found this CVE by accident last summer, and afaik...

MS17-010

MS17-010 As all of our research is now in Metasploit master repository, there was no reason to confuse everyone by keeping this repository open as there were two versions of everything and due to overwhelming popularity support became a nightmare as this is merely a side project. Please do not ma...

CVE-2024-21338-Exploit

CVE-2024-21338 Exploit Project Introduction This is a POC for CVE-2024-21338, a privilege escalation vulnerability in the Windows AppLocker driver appid.sys. It was exploited as a 0-day by the Lazarus group for local privilege escalation on Windows. Vulnerability Background CVE-2024-21338 is a...

CVE-2023-2008

CVE-2023-2008 Proof of concept exploit for CVE-2023-2008, a bug in the udmabuf driver of the Linux kernel fixed in 5.19-rc4. You can find a description of the bug and the exploitation strategy in our blog post. The exploit was tested on a vulnerable Ubuntu 22.04, and it requires access to the...

sigwire

sigwire tail -f for signals. Every signal any process on the box raises — who sent it, who it hit, which signal, how it was raised kill2, the kernel, a POSIX timer, whether the target caught it and how long its handler ran, whether it tore a blocked syscall out with EINTR — decoded off the kernel...

dirty-pipe-poc

Dirty Pipe POC CVE-2022-0847 POC - https://dirtypipe.cm4all.com/ Description This exploit attempts to use the CVE-2022-0847 vulnerability to overwrite a read only file. When make exploit is run, it will: 1. Create a readonlyfile.txt 2. Execute the dirtypipe exploit. 3. Check if the dirtypipe...

SELinux-Permissive-Only-CVE-2025-21479

SELinux-Permissive-Only-version-of-Cheese-aka-CVE-2025-21479 This is an SELinux permissive only version, for now, of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices Some of the code has been recycled from the...

CVE-2022-36946

CVE-2022-36946 Reported-by: Domingo Dirutigliano and Nicola Guerrera While we were working on firegex, our application firewall for CTF Attack-Defence competitions, we stumbled upon a few kernel panics. This strange behavour was than isolated and anlayzed, leading to the discovery of this potenti...

rmx3888-cve-2026-43499-config

CVE-2026-43499 Exploit Configuration for realme RMX3888 Device Information Brand/Model : realme RMX3888 Android Version : 16 SDK 36 Build ID : BP2A.250605.015 Kernel : Linux 6.1.141-android14-11-o-gffc54a6d2287 SoC : Qualcomm SM8650 Snapdragon 8 Gen 3 Architecture : ARM64 aarch64 Overview This...

CVE-2025-50168-pwn2own-berlin-2025

Author: D4m0n CVE-2025-50168 This is an exploit submitted to Pwn2Own Berlin 2025 - LPE Category. The vulnerability occurs in Win32kbase!DirectComposition, and further details can be found in the blog post. Acknowledgements kASLR bypass technique: prefetch-tool by carrotc4k3 Special thanks to: Dav...

CVE-2023-0386

typora-copy-images-to: ./image CVE-2023-0386 Exploit Usage: First : Upload fuse.c and exp.sh to the /tmp directory. You can use scp or python3 -m http.server to upload the file to the target. scp /Desktop/CVE-2023-0386/exp.sh [email protected]:/tmp scp /Desktop/CVE-2023-0386/fuse.c...

tinyos-rtos

TinyOS — Ultra-Lightweight RTOS for IoT An ultra-lightweight real-time operating system for resource-constrained IoT and embedded devices. Kernel footprint under 10 KB, 2 KB minimum RAM, preemptive priority-based scheduling. Features Category| Details ---|--- Kernel| Preemptive priority-based...