CVE-2021-3560_PoC

CVE-2021-3560PoC polkit exploit script Automated script for escalating to root using polkit service Requirements SSH server this is to avoid having authentication popups through GNOME Vulnerable Linux distribution: Distribution | Vulnerable? ---|--- RHEL 7 | No RHEL 8 | Yes Fedora 20 or earlier |...

CVE-2021-4034

CVE-2021-4034 Polkit PoC What is Polkit? Policy Toolkit or Polkit since its release in 2009 allows any attacker without root permissions to easily obtain administrative access over any Linux system with the Polkit package. Unfortunately or not, it is installed by default in most Linux...

CVE-2019-5736-Dockerattack-and-security-mechanism

CVE-2019-5736-attack-and-security-mechanism In this project, we found a recent attack through the malicious container and implemented a security mechanism to stop it. Introduction Cyber-attacks have become a critical challenge for both companies and small businesses, largely due to vulnerabilitie...

CVE-2021-27285

CVE-2021-27285 The Inspur ClusterEngine cluster management platform is a job management software specifically designed for Inspur TianSuo series HPC products. Inspur ClusterEngine has an improper SUID configuration issue, which allows non-administrative users to escalate privileges through certai...

Docker-Escape-Miner

Using a published Docker exploit to gain root access and run a bitcoin mining script This uses two open source libraries: nightminer by @ricmoo for python bitcoin mining RunC-CVE-2019-5736 by @twistlock for the docker escape System Requirements This was tested on Kali Linux, with Docker version...

CVE-2025-32463-PoC

CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Overview CVE-2025-32463 is a local privilege escalation vulnerability affecting the sudo utility. It allows a regular user to escalate privileges to root by exploiting the -R option which sets a custom runtime root directory together with...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

PwnKit

PwnKit This repository contains an exploit I developed to understand how the Polkit Pkexec vulnerability works: CVE-2021-4034 Pkexec Local Privilege Escalation. Polkit formerly known as PolicyKit is a component that controls privileges on Unix-like operating systems. It provides an organized way...

CVE-2021-22555

CVE-2021-22555 This repo hosts TUKRU's Linux Privilege Escalation exploit CVE-2021-22555. It demonstrates gaining root privileges via a vulnerability. Tested on Ubuntu 5.8.0-48-generic and COS 5.4.89+. Use responsibly and ethically. CVE-2021-22555: Linux Privilege Escalation Exploit This reposito...

Exploit11.2

Exploit11.2 Exploit iOS 11.2.x by ZIMPERIUM and semi-completed by me. Sandbox escapes on CVE-2018-4087.This checks also of a root access incompleted. You can creat an app to running exploit on your device if you are a developer and turn the root access @. Thanks to: •RaniXCH, Adam Donenfeld,...

CVE-2024-24402

Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK Vulnerability Details: Endpoint: Nagios XI Version 2024R1.01 Vulnerability Type: Privilege Escalation from User "NAGIOS" Exploitation Result: Full root access on the target system Steps to Reproduce: 1. Create a Fresh Instance of Nagios XI...

SideWinder-Exploit

🛡️ CVE-2021-3560 Privilege Escalation Exercise 📚 Overview This repository contains materials for a hands-on cybersecurity exercise centered on CVE-2021-3560 , a privilege escalation vulnerability in polkit. Discovered by GitHub Security Lab in 2021, this flaw allowed unprivileged Linux users to...

sony-bravia-root-toolkit

sony-bravia-root-toolkit CVE-2019-2215 & DirtyCOW exploit automation + post-root debloat + Magisk modules for Sony BRAVIA KDL-43W800C...

CVE-2021-3156

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character...

CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class. https://bugs.launchpad.net/apport/+bug/1438758 Bonus opportunities http://matt.might.net/teaching/compilers/spring-2015/ Use an exploit on vulcan to gain root access: +10% for a local user...

METABASE-RCE-CVE-2023-38646-

METABASE-RCE-CVE-2023-38646- To get the root user of the machine or system according to the information above, this command and file will get into root user. You can run this command directly or run as file and execute. Command: $unshare -rm sh -c "mkdir l u w m && cp /u/b/p 3 l/; setcap...

CVE_2022_46395_Gazelle

Exploit for CVE-2022-46395 to run on FireTV 3rd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

cve-2016-6662

About Some help to explot CVE-2016-6662 Warnings Make sure to change the attacker IP in the c file before compiling Credit All credit to original discoverer. Writeups here: http://legalhackers.com/advisories/MySQL-Exploit-Remote-Root-Code-Execution-Privesc-CVE-2016-6662.html Discussion here:...

CVE-2024-36842-Backdooring-Oncord-Android-Sterio-

CVE-2024-36842 Backdooring-Oncord+ Android-Sterio We have conducted vulnerablity assessment on one of the most selling after marrket car infotainment unit. Creating Persistent Backdoor on Oncord+ android/ios car infotainment unit using malicious script! About Device: Android version : 12 Kernel...

op13-cve-2026-64560

OnePlus 13 OP5D0DL1 CVE-2026-64560 Device-specific adaptation of the CVE-2026-64560 Android proof of concept for the exact OnePlus 13 PJZ110 builds listed below. It provides temporary root access for the current boot through an ADB-shell-only helper. !WARNING This is experimental kernel exploit...