93 matches found
cve-2018-8611
CVE-2018-8611 KTM UAF Privilege Escalation Exploit This is my PoC privilege escalation exploit for CVE-2018-8611, I wrote this exploit while studying ost2 windows kernel exploitation course I really enjoyed the course and how it takes a step by step approach and the examples they provide, and so...
Windows-11-24h2-Kernel-Exploit
Windows-11-24h2-Kernel-Exploit Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446eneio64.sys...
linux-kernel-exploitation
Linux Kernel Exploitation A collection of links related to Linux kernel security and exploitation. Updated bimonthly. Pull requests are welcome as well. Follow @andreyknvl on X, @[email protected] on Mastodon, or @andreyknvl on Bluesky to be notified of updates. Subscribe to @linkersec on...
android-kernel-exploitation-ashfaq-CVE-2019-2215
android-kernel-exploitation-ashfaq-CVE-2019-2215. Docker image provided by user Robert Dan in the workshop android-kernel-exploitation-ashfaq-CVE-2019-2215...
CVE-2025-21333-POC
CVE-2025-21333-POC Proof of Concept that exploits CVE-2025-21333 in vkrnlintvsp.sys not so reliable see Requirements and Limitations section. Under the References section are located very helpful resources for who wants to play with the exploit. A detailed analysis of the vulnerability and the...
CVE-2021-31956-POC
" CVE-2021-31956" WIP PoC code for CVE-2021-31956 in preparation for OSEE. Will improve it further after my OSEE exams and free time. A lot of hardcoded offsets need to be changed if it is different on the target system but if it is anything similar to 2020 - 2021 builds then no change should be...
CVE-2022-22077
✅ CVE-2022-22077 exploitation framework RTCore64.sys: This document provides a comprehensive overview of the CVE-2022-22077 exploitation framework, a sophisticated BYOVD Bring Your Own Vulnerable Driver attack toolkit that targets the RTCore64.sys driver vulnerability. This framework demonstrates...
CVE-2024-21338
CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...
CVE-2023-2008
CVE-2023-2008 Proof of concept exploit for CVE-2023-2008, a bug in the udmabuf driver of the Linux kernel fixed in 5.19-rc4. You can find a description of the bug and the exploitation strategy in our blog post. The exploit was tested on a vulnerable Ubuntu 22.04, and it requires access to the...
CVE-2023-3640
SCTF2023kernelpwn SCTF 2023 kernel pwn Off-topic: A little advertisement — the author is a 2024 undergraduate graduate student, participating in this year's autumn recruitment. Feel free to contact me sycrop This problem aims to test two points. 1. The starting points of the cpu entry area mappin...
CVE-2024-21338
CVE-2024-21338 Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled. Compiling Use Microsoft Visual Studio with the C++ package to successfully compile the PoC on both Release and Debug modes. Post Original blog post:...
kernel-mii
Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF which exploits CVE-2021-21551. It only overwrites the beacon...
amd-ryzen-master-driver-v17-exploit
Cobalt Strike Beacon Object File for kernel exploitation using AMD's Ryzen Master Driver version 17. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF and executable which exploits AMD's Ryzen Master...
CVE-2014-3153-exploit
CVE-2014-3153-exploit My exploit for kernel exploitation...
libslub
libslub libslub is a python library to examine the SLUB managements structures and object allocations the Linux kernel heap implementation. It is currently designed for use with GDB but could easily be adapted to work with other debuggers. It helps understanding SLUB internals and developing Linu...
Presentations
Presentations Presentation| Slides| Video ---|---|--- BlueHat IL 2020 - Trinity: PSP Emulator Escape| 2020-BlueHatIL-Trinity.pdf| https://www.youtube.com/watch?v=J0OQsDTyAL8 Hardwear.io USA 2022 - bd-jb: Blu-ray Disc Java Sandbox Escape| 2022-hardwear-io-bd-jb.pdf|...
linux-kernel-exploitation
Explotación del Kernel de Linux Una colección de enlaces relacionados con la seguridad y explotación del kernel de Linux. Actualizado cada dos meses. Las pull requests también son bienvenidas. Sigue a @andreyknvl en X, @[email protected] en Mastodon, o @andreyknvl en Bluesky para recibir...
kernelpop
kernelpop kernelpop es un marco de trabajo para realizar enumeración y explotación automatizada de vulnerabilidades del kernel en los siguientes sistemas operativos: Linux Mac Está diseñado para ser python-agnóstico en cuanto a versión, lo que significa que debería funcionar tanto con python2 com...
android-kernel-exploitation
Exploitazione del Kernel Android Obiettivo L'obiettivo di questo workshop è iniziare con l'analisi delle vulnerabilità del kernel e lo sfruttamento nella piattaforma Android. Utilizzo Clona il repository git clone https://github.com/cloudfuzz/android-kernel-exploitation /workshop URL delle Github...
