Concryptor

Concryptor Un motor de cifrado AEAD multi-hilo escrito en Rust. Cifra y descifra archivos a un rendimiento de gigabytes por segundo utilizando un pipeline de iouring con triple búfer, procesamiento paralelo de fragmentos mediante Rayon y cifrados optimizados en ensamblador a través de ring. ⚠️...

cve-2026-31431

CVE-2026-31431 — Copy Fail: Linux Kernel LPE Research Lab Educational purposes only. Do NOT use on systems without explicit authorization. Index Description of the vulnerability Affected components How it works Lab setup Docker PoC — Demonstration Mitigation References Vulnerability Description...

USSH

USSH USSH is a shell protocol and client/server pair built on top of USTP-Secure. It is not a TCP tunnel and does not wrap SSH inside TCP. Status: Beta License: MIT AEAD cipher names chacha20 = CHACHA20POLY1305 aes-256-gcm = AES256GCM aes-128-gcm = AES128GCM Default AEAD cipher: chacha20 Default...

CVE-2025-15467

CVE-2025-15467: OpenSSL CMS AuthEnvelopedData Stack Buffer Overflow Overview CVE-2025-15467 is a critical stack buffer overflow vulnerability in OpenSSL's CMS Cryptographic Message Syntax parsing code. The vulnerability exists in the evpciphergetasn1aeadparams function when processing AES-GCM...

CESS

CESS — Cryptologically Enchanted Shamir's Secret Is this AI bullshit or slop? A cryptographer or serious implementer reviewing CESS will typically open vectors/ and testdata/ before reading prose. The test suite is the proof of work: it encodes domain knowledge that cannot be substituted with...

cve-2026-31431

CVE-2026-31431 This document describes a public Python exploit related to the CVE-2026-31431 vulnerability. The code demonstrates the exploitation of the flaw using primitives from the Linux AFALG subsystem, AEAD cryptographic operations, and memory manipulation via splice, with the goal of...

CVE-2026-31431-python-copyfail-POC

CVE-2026-31431: Copy Fail - Linux Kernel Privilege Escalation Copy Fail CVE-2026-31431 is a critical logic bug in the Linux kernel's cryptographic subsystem that allows unprivileged users to achieve privilege escalation to root. The vulnerability affects Linux kernels 6.0.0 through 6.18.x across...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — Copy Fail Severity: Critical CVSS v3.1: 9.8 AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Status: Public Exploit Available Summary CVE-2026-31431 "Copy Fail" is a local privilege escalation vulnerability in the Linux kernel cryptographic subsystem. Any unprivileged user can escalate to roo...

CVE-2026-31431-CopyFail-static-ELF--POC

CVE-2026-31431: Copy Fail - 587-byte static ELF I did not find this bug. Credit goes to Xint Code / Theori. This repo is my take on making the exploit as small as possible - a hand-rolled x8664 ELF that does the full LPE in 587 bytes. No libc, no linker, no runtime. Just NASM and stubbornness. In...

Copy-fail-CVE-2026-31431-Exploit-in-C

Copy-fail-CVE-2026-31431-Exploit-in-C Discovery and original disclosure of CVE-2026-31431: Theori / Xint. Public writeup: https://copy.fail/. Overview This program targets the Linux kernel’s AFALG AEAD path and attempts to trigger the “Copy Fail” page-cache corruption behavior described in public...

CVE-2026-31431-copyfail-rs

CVE-2026-31431 CopyFail CVE-2026-31431 POC. Pure Rust implementation, no runtime dependencies. Applicable Targets Linux x8664 kernels with CONFIGCRYPTOUSERAPIAEAD=y AFALG AEAD support enabled and the algifaead module loadable. Usage root@kitploit: ./CVE-2026-31431-copyfail-rs Dependencies Build...

CVE-2026-31431

📌 CVE-2026-31431 – Privilege Escalation via AEAD Crypto Socket Misuse 🧠 Overview CVE-2026-31431 is a Linux privilege escalation vulnerability that abuses the AFALG kernel crypto API interface. By crafting a malicious interaction with AEAD Authenticated Encryption with Associated Data sockets, an...

cve-2026-31431-detection

CVE-2026-31431 "Copy Fail" — Defensive Detection Package A production-ready collection of detection rules and triage guidance for CVE-2026-31431, a Linux kernel local privilege escalation in the algifaead crypto interface disclosed by Theori Xint Code Research. The vulnerability exploits an...

CVE-2026-31431

Test, patch, fix: CVE-2026-31431 root@kitploit: Test:Check vuln python3 -c 'import socket;exec"try:s=socket.socketsocket.AFALG,socket.SOCKSEQPACKET,0;s.bind"aead","authencesnhmacsha256,cbcaes";print"vulnerable"\nexcept:print"not vulnerable""' root@kitploit: check if module Check if module...

CVE-2026-31431-patch

CVE-2026-31431-patch A temporary mitigation for CVE-2026-31431 vulneribility git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh Once server is back from reboot execute below script: sh completeaead.sh...

cve-2026-31431-ftrace

cve-2026-31431 mitigation using ftrace The ebpf solutions around for mitigating cve-2026-31431 require lsm=bpf at boot time, which is usually not set by default. For OracleLinux this was enabled by default in UEKr7u3 and in UEKr8u1 after December 2025. To check whether or not you can use ebpf-lsm...

CVE-2026-31431

copy.fail — AFALG AEAD splice primitive CVE-2026-31431 Overview This project is a C port of the original Python prototype, by offsecguy. It leverages the Linux kernel crypto API AFALG using: authencesnhmacsha256,cbcaes AEAD mode MSGMORE flag splice system call The technique feeds data from a...

cve-2026-31431

CVE-2026-31431 Copy Fail Detection and Mitigation Tool This project provides a set of Bash scripts for detecting and mitigating CVE-2026-31431 also known as "Copy Fail", a Linux kernel local privilege escalation vulnerability. Vulnerability Overview CVE ID : CVE-2026-31431 Vulnerability Type :...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - AFALG AEAD Splice UAF PoC Multi-language implementation and compatibility with older versions of Python. C exploit.c root@kitploit: gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Tested on Ubuntu 20.04: Python exploit-python3-8-10.py Compatible with...

Copy-Fail-CVE-2026-31431-Statically-PoC

Copy-Fail CVE-2026-31431 Static Go PoC This repository contains a Go port of the public Python proof of concept from theori-io/copy-fail-CVE-2026-31431. The program is Linux-only. It uses the Linux AFALG interface, AEAD control messages, and splice2 to preserve the behavior of the original PoC...