474122 matches found
rustproofing-linux
Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...
CVE-2025-38001
CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Research This repository contains a Proof of Concept PoC for the CVE-2025-38001 security vulnerability that targets the HFSC module in the Linux Kernel. Created specifically as learning material for kernel memory corruption and security...
TriforceLinuxSyscallFuzzer
TriforceLinuxSyscallFuzzer 20160613 https://github.com/nccgroup/TriforceLinuxSyscallFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Lin...
CVE-2025-21756
CVE-2025-21756 β Exploitation Lab For educational and authorized security research purposes only. Description CVE-2025-21756 is a use-after-free UAF vulnerability in the Linux kernel's vsock Virtual Socket subsystem, disclosed on February 26, 2025. It allows a local attacker to escalate privilege...
CVE-2023-32629
CVE-2023-32629 β OverlayFS Local Full Privilege Escalation OverlayFS Local Privilege Escalation - Full write-up to full escalation For educational and authorized security research purposes only. Severity: High Type: Local Privilege Escalation LPE Affected: Ubuntu kernels prior to May/June 2023...
0days-for-latest-kernel
This repository does not have a README...
IvantiInitrdDecryptor
Here's a quick-and-dirty tool to decrypt the Ivanti device's initrd. It's mostly academic since there are other ways to extract the much more useful LVM keys for the real root device. To use it, copy the kernel file from the Ivanti, and extract the ELF from the bzImage I used binwalk -e. Throw it...
Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP
Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Kernel Arbitrary Read Vulnerability + Superfetch EOP based on reacher from https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . Exploit must be run from low integrity...
EternalBlue-Exploit-Demonstration
EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...
RowHammer-Exploit
RowHammer-Exploit RowHammer Based-Exploitbackdoor syssuid using rowhammer Still needs work... figure why stuff doesn't work properly... Current stage... Denial fails with the following stack trace... UG: unable to handle kernel paging request at 0000000100000000 PGD 8000000006de3067 P4D...
ddos-reduction-system
FLOD System First Line Of Defense An adaptive two stage Layer 4 volumetric DDoS mitigation gateway. Author: Abdullah Armiyao Project: Adaptive Two Stage Framework for Near Real Time Layer 4 Volumetric DDoS Mitigation Using Behavioral Traffic Analysis What It Does Most DDoS mitigation uses fixed...
siem
Offensive SIEM Practical techniques for leveraging SIEM as an offensive discovery tool, helping defenders think like attackers to strengthen security from within. Queries See above - queries.md file. Will keep getting updated when needed. The idea is to have layer on layer coverage using differen...
EAC-Kernel-Packet-Fucker
EAC-Kernel-Packet-Fucker Not my code. Only for saving https://www.unknowncheats.me/forum/anti-cheat-bypass/503052-easy-anti-cheat-kernel-packet-fucker.html This is the Easy Anti-Cheat Kernel Packet Fucker for short, EACKPFucker. What is this? Basically, packets via their kernel mode driver are no...
totally-not-spyware
TotallyNotSpyware This program is definitely not spyware. Run it on your 64-bit iOS device as soon as possible. Your compliance will be rewarded. Live version at totally-not.spyware.lol Repo structure & building Frontend and WebKit exploit are in /root. Kernel exploit is in /glue. Post-exploitati...
CVE-2023-6241
Exploit for CVE-2023-6241 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2023. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...
CVE-2026-31402
π‘οΈ CVE-2026-31402 β NFSv4 LOCK Replay Cache Heap Overflow CVE-2026-31402: Linux NFS Bug Hidden for 23 Years π Overview CVE-2026-31402 is a heap overflow vulnerability in the NFSv4.0 LOCK replay cache of the Linux kernel. It arises due to improper handling of responses larger than the fixed buffer...
LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.-
LInux-Kernel-InfoLeak-6.12.-Leveraged-to-do-cross-container-info-leak.- POC shows how to leak postgresql stuff cause hugefile sub-system. Based on https://x.com/spendergrsec/status/1993794163880718700?s=20...
EternalBlue-Exploit-Demonstration-MS17-010
EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...
CVE-2024-51324
CVE-2024-51324 β BYOVD: BdApiUtil64.sys Β· Master's Thesis Research -orange Bring Your Own Vulnerable Driver BYOVD β Baidu AntivirusBdApiUtil64.sys Three undocumented kernel primitives: process termination, arbitrary file deletion, and in-use file deletion with SectionObjectPointer bypass Affected...
RootMyVivo-Exploit
RMV Exploit β CVE-2026-43499 for vivo and iQOO A fork of boxiaolanya2008/CVE-2026-43499-Neo11Plus, reworked for RootMyVivo. Everything that broke the phone after rooting is gone; the exploit core keeps its proven timing. Π ΡΡΡΠΊΠΈΠΉ Β· δΈζ Targets Directory| Device| Kernel| Offset source ---|---|---|--...