exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

QuestStack

QuestStack QuestStack is a Meta Quest root and bootloader unlocking project. Using the GhostLock privilege escalation chain and the CVE-2021-1931 ABL/fastboot vulnerability, QuestStack provides a way to gain root access on the latest Quest 1 firmware, temporarily boot using a vulnerable ABL, and...

dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

wp2shell-poc

wp2shell PoC The first ever poc of the pre-auth timing-based SQL injection PoC for the WordPress REST API batch-route confusion chain CVE-2026-63030 + CVE-2026-60137 Achieved command execution, without just trying to crack the admins password. Affected: WordPress 6.9.0–6.9.4 and 7.0.0–7.0.1. Fixe...

linux-kernel-exploits

linux-kernel-exploits Introduction linux-kernel-exploits Vulnerability List CVE Description Kernels CVE–2018–18955 mapwrite in kernel/usernamespace.c allows privilege escalation Linux kernel 4.15.x through 4.19.x before 4.19.2 CVE–2018–1000001 glibc glibc 2.6.22 released in 2007 CVE-2016-2384 a...

CVE-2022-21882

CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test only tested on windows 20h2 19042.1415 tested on windows 21H1 not working Download https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Many thanks to Kalendski. Based on:...

CVE-2026-0315

A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows,...

CVE-2024-5009

CVE-2024-5009 PoC for Progress WhatsUp Gold SetAdminPassword Privilege Escalation CVE-2024-5009 A root cause analysis of the vulnerability can be found on my blog: https://summoning.team/blog/progress-whatsup-gold-privesc-setadminpassword-cve-2024-5009/ Usage python3 CVE-2024-5009.py --target...

linuxprivchecker

Linuxprivchecker.py A Linux Privilege Escalation Check Script Orginal Author: Mike Czumak Tv3rn1x -- @SecuritySift Current Maintainer: Michael Contino @Sleventyeleven This script is intended to be executed locally on a Linux box to enumerate basic system info and search for common privilege...

CVE-2022-23131

CVE-2022-23131 CVE-2022-23131Unsafe Session Storage 0x00 Preface Zabbix vulnerability CVE-2022-23131, I accidentally obtained a Zabbix server of a foreign company. Zabbix Sia Zabbix is an open-source monitoring system developed by Zabbix SIA Zabbix Sia from Latvia. This system supports network...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract This document describes the Dirty Frag vulnerability class, first discovered and reported by Hyunwoo Kim @v4bel, which can obtain root privileges on major Linux distributions by chaining the xfrm-ESP Page-Cache Write CVE-2026-43284 vulnerability and the...

CVE-2021-4034

CVE-2021-4034 PolKit Local Privilege Escalation Analysis toc Vulnerability Overview Vulnerability ID: CVE-2021-4034 Vulnerability Score: Affected Product: linux PolKit pkexec Affected Versions: Versions from 2009 to present current 0.105 Reference http://its.dlut.edu.cn/info/1054/78309.htm Exploi...

Privilege-escalation-MitraStar

Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Privilege escalation vulnerability on MitraStar routers Device: Mitrastar GPT-2541GNAC-N1 Firmware: BRg3.5100VNZ0b33 not tested in other version Exploit: Mitrastar GPT-2541GNAC-N1 devices are provided with access through ssh int...

CVE-2021-4034

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

UACME

UACMe Defeating Windows User Account Control by abusing built-in Windows AutoElevate backdoor. This project demonstrates various UAC bypass techniques and serves as an educational resource for understanding Windows security mechanisms. ⚠️ Warning : This tool demonstrates security vulnerabilities...

AWSGoat

AWSGoat : A Damn Vulnerable AWS Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...

sandbox-attacksurface-analysis-tools

sandbox-attacksurface-analysis-tools version 2. c Google LLC. 2015 - 2024 Developed by James Forshaw This is a small suite of PowerShell tools to test various properties of sandboxes on Windows. Many of the tools take a -ProcessId flag which is used to specify the PID of a sandboxed process. The...

EscalateGPT

Introduction IAM Privilege Escalation Identification Tool Features 🛠️ Identifies potential privilege escalation issues in AWS IAM and Azure RBAC policies 💻 Leverages most advanced AI models via OpenAI for analysis 👍 Returns escalation paths and mitigation recommendations in easy to understand JSON...

CVE-2020-0796

CVE-2020-0796 Windows SMBv3 LPE Exploit Authors Daniel García Gutiérrez @danigargu Manuel Blanco Parajón @dialluvioso Exploit analysis POC Analysis by SungLin Knownsec 404 Team Writeup+PoC by @ZecOps References https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0796...

CVE-2026-96540

An improper access control vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to...