Tokenizer

NOTE This project was one of my earliest projects for learning more about Windows drivers. Please see Chaos-Rootkit for the complete version...

ps5-umtxdbg

NOTES The bug was found in early december 2020, not by me, but a genius who looked 15mins at fbsd and immediately spotted it 🙇‍♂️. This c++ impl was made when experimenting with increasing exploit reliability after ps5 kernel added some heap randomization features. setup vm get vm image wget...

CVE-2022-0847

CVE-2022-0847 Simple reproduction of CVE-2022-0847 Original article by the disclosing author: https://dirtypipe.cm4all.com/ Reproduction Environment Linux kali 5.10.0-kali7-amd64 1 SMP Debian 5.10.28-1kali1 2021-04-12 x8664 GNU/Linux Dependencies gcc Usage Steps git clone...

Pishi

Pishi Pishi is a static binary rewriting tool designed to instrument basic blocks in XNU kernel and in arbitrary macOS kernel extensions kexts. for XNU kernel, Pishi allows you to instrument at a function, file, or folder level. For example, you can instrument everything in the /bsd/net/ director...

oob_entry

oobentry tfp0 kernel exploit supporting every armv7 iOS version iOS 3.0-10.3.4. The vulnerability used in this exploit is CVE-2023-32434. I will be releasing a write up in the coming weeks about this exploit and methods used...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp This program is an exploit for CVE-2018-8453. The vulnerability itself exists in Windows 7 and later versions. Note: It can only be exploited on Windows 8.1 and later versions! Therefore, this EXP can only be used on Windows 8.1 and later versions...

DirtyClone

DirtyClone DirtyClone is a diagnostic, proof-of-concept local privilege escalation tool written in C. It targets a kernel/XFRM-related exploit path described in the source as CVE-2026-43503 and is intended only for authorized security research in controlled environments. Overview This repository...

CVE-2026-31431_SCA_WAZUH

Wazuh SCA policy: Copy Fail CVE-2026-31431 This policy file: copy-fail-cve-2026-31431-policy.yml is designed to detect likely exposure and mitigation status for Copy Fail / CVE-2026-31431. What this policy checks 1. algifaead is disabled via modprobe policy. 2. algifaead is not currently loaded. ...

CVE-2026-98372

A flaw was found in the Linux kernel's IP Traffic Flow Security IP-TFS implementation within the XFRM subsystem. When processing incoming network traffic, a missing boundary check on packet fragment offsets allows an unbounded loop to read memory past the end of an on-stack array. A remote attack...

CVE-2026-98186

A flaw was found in the Linux kernel's mwifiex Wi-Fi driver. A nearby wireless attacker can exploit this vulnerability by broadcasting crafted Wi-Fi beacon or probe response frames containing an excessively large pairwise cipher count. Because the driver fails to validate this count against the...

HTB-TwoMillion-Writeup

HTB-TwoMillion-Writeup HackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386 HackTheBox — TwoMillion Writeup HackTheBox — TwoMillion Writeup Machine Info Field| Details ---|--- Name| TwoMillion Difficulty| Easy OS| Linux IP| 10.10.11.221 CVE| CVE-2023-0386 Summary...

CVE-2020-1206-POC

CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory. Intended only for educational and testing in corporate...

eBPF-hid_guard

eBPF-hidguard See Why This Was Archived below. A Linux kernel-space security monitor for detecting and blocking HID injection attacks Rubber Ducky, O.MG Cable, ESP32-based keyboard emulators using eBPF HID-BPF structops. What This Does Malicious HID devices emulate keyboards and inject keystrokes...

Chrono-Drip-Temporal-Viscosity-Exploitation-Framework-CVE-2022-0847

Chrono-Drip: Temporal Viscosity Exploitation Framework CVE-2022-0847 Weaponization via Convergent Time Theory CTT ⚠️ DISCLAIMER FOR RESEARCH AND ACADEMIC PURPOSES ONLY This tool demonstrates the application of fundamental physics discoveries to cybersecurity. All work presented here is theoretical...

CVE-2021-32537

CVE-2021-32537: Out-of-bounds access in RTKVHD64 leading to pool corruption. This is a bug that I reported to Realtek beginning of April 2021. The affected driver is named RTKVHD64.sys and seems to be available on a bunch of mainstream hardware tested the below hardware configurations but probabl...

ansible-role-cve

Ansible Role: CVE This role mitigates/patches the defined CVEs. Role Variables Dirty COW vuln. http://dirtycow.ninja. Defaults to false. This mitigation will need to be run everytime the server it has been applied on restarts. cve20165195: false Example Playbook --- - hosts: localhost connection:...

PT-2026-108769

In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf skb pull data for LWT SEG6LOCAL An LWT SEG6LOCAL program can invalidate its cached SRH with bpf lwt seg6 adjust srh and then call bpf skb pull data. The latter may reallocate skb-head, leaving the per-CPU SRH...

SUSE SLES12 Security Update : kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4570-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4570-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: -...

SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4561-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4561-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes various security issues: The following security issues were fixed: -...

SUSE SLES12 Security Update : kernel (Live Patch 85 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4586-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4586-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.320 fixes various security issues: The following security issues were fixed: -...