CVE-2026-31431

CopyFail2 CVE-2026-31431 - Python Implementation Python port of the CopyFail2 kernel exploit leveraging xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path for unprivileged Linux local privilege escalation. Replaces a nologin/false entry in /etc/passwd with a passwordless uid-0 user and drops into a...

CVE-2016-5195

demo1 This demo is based on https://github.com/timwr/CVE-2016-5195 make test output: user@user:/$ cd /home/user/demo1 && make test /home/user/adb/android-ndk-r21d/ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPABI=x8664 APPPLATFORM=android-23 make1: Entering directory '/home/user/demo1...

packet_edit_meme

PACKETEDITMEME - aka CVE-2026-46331 net/sched actpedit partial-COW page-cache corruption culprit 899ee91156e5, present v5.18 .. fixed v7.1-rc7. packeteditmeme.c turns it into unprivileged local root: a userns CAPNETADMIN child overwrites the cached ELF entry of setuid-root /bin/su with...

dirtycow-lab

Dirty COW Educational PoC CVE-2016-5195 ⚠️ Legal Warning This code is for EDUCATIONAL PURPOSES ONLY. Any malicious use is strictly prohibited and illegal. 📖 What is Dirty COW? Dirty COW CVE-2016-5195 is a privilege escalation vulnerability in the Linux Kernel that exploits a race condition in the...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

CVE-2016-5195

CVE-2016-5195 Here are some exploit codes for the Dirty Cow vulnerability...

Dirty-Cow-CVE-2016-5195-

Dirty-Cow-CVE-2016-5195- This is a Dirty Cow CVE-2016-5195 privilege escalation vulnerability exploit...

MacDirtyCowDemo

Get root on macOS 13.0.1 with CVE-2022-46689 macOS equivalent of the Dirty Cow bug, using the testcase extracted from Apple's XNU source. https://worthdoingbadly.com/macdirtycow/ Usage On a macOS 13.0.1 / 12.6.1 or below machine, run: clang -o switcharoo vmunalignedcopyswitchrace.c sed -e...

CVE-2016-5195

This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...

dirtycow-vdso

0xdeadbeef PoC for Dirty COW CVE-2016-5195. This PoC relies on ptrace instead of /proc/self/mem to patch vDSO. It has a few advantages over PoCs modifying filesystem binaries: no setuid binary required SELinux bypass container escape no kernel crash because of filesystem writeback And a few cons:...

CVE-2026-46331-pedit-COW-detection

CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/AppArmor Detection Defensive validation report for CVE-2026-46331, focused on Linux kernel actpedit, local privilege escalation behavior, auditd telemetry, AppArmor mitigation, and detection logic. Repository description This repository...

CVE-2016-5195

CVE-2016-5195: Dirty COW Linux Kernel Race Condition Defensive research, non-weaponized validation, and patch analysis for CVE-2016-5195 Dirty COW, a Linux kernel copy-on-write race condition that can allow a local user to modify data associated with a read-only mapping and gain elevated...

dirtycow-replacer

PLEASE NOTICE I AM NOT FORMALLY TESTING THIS CODE IT IS BEING DESIGNED AS AN EDUCATIONAL TOOL What's it do? android-dirtycow-replacer uses the CVE-2016-5195 dirtycow exploit to patch a list of over 1000 files. You can edit it to be 10000 but 1000 should do. It checks first to make sure the files...

CVE-2016-5195

CVE-2016-5195 my personal POC and EXPLOIT of CVE-2016-5195 dirty COW Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: $ gcc poc.c -o poc -static -lpthread You shall run it as follow: ./poc destinationfile fakefile You shall make sure the...

pagecache-lpe-containment-kit

Page-Cache LPE Containment Kit Detect, contain, and verify defenses against two Linux page-cache-corruption local privilege escalations — DirtyClone CVE-2026-43503 and pedit COW CVE-2026-46331 — on hosts and containers. This is an educational, defensive security kit. It explains how both...

chocobo

chocobo Chocobo Root CVE-2016-8655 Analysis Notes This is the newest Linux privesc, released 2016-12-06 here http://seclists.org/oss-sec/2016/q4/607. References found at this point: http://www.theregister.co.uk/2016/12/07/androiddirtycowkernelpatch/ https://www.exploit-db.com/exploits/40871/ Goal...

PE-Linux

PE-Linux New Linux Privilege Escalation Tool Getting Started System Information Gatherer Kernel Information Gatherer Checking Development environments on the system Escaping Restricted Shells Extract PATH & environment Information Check Kernel if Vulnerable To Dirty cow Exploit Password Collector...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 DirtyCow root privilege escalation Dirty COW was a race-condition vulnerability in the Linux kernel. This vulnerability lived inside the kernel functions which handle the copy-on-write COW feature of memory mappings and when exploited allowed processes to write to...

scan-dirtycow

Dirty Cow Kernel Checker Scan vuls kernel CVE-2016-5195 - DirtyCow Usage Local System git clone https://github.com/aishee/scan-dirtycow cd scan-dirtycow && chmod +x dirtycowscan.sh && ./dirtycowscan.sh Vulnerable Kernels RedHat Debian Ubuntu: 12.04-14.04-16.04 References https://dirtycow.ninja/...