CVE-2026-64560-Analysis

CVE-2026-64560 — Linux Kernel posix-cpu-timers non-leader exec race UAF Reproducer / PoC trigger verification : Linux & Android NDK This repository is intended solely for verifying patch status and for research/learning on your own test devices. It does not contain any privilege...

CVE-2022-34918

CVE-2022-34918 LPE POC Tried incorporating the USMA exploitation idea proposed by 360, not bad. Chinese writeup: CVE-2022-34918 netfilter Analysis Notes Practice of Writing Generic Kernel EXP Based on USMA on CVE-2022-34918 !! For educational / research purposes only. Use at your own risk. !! poc...

blanket

blanket Blanket is a sandbox escape targeting iOS 11.2.6, although the main vulnerability was only patched in iOS 11.4.1. It exploits a Mach port replacement vulnerability in launchd CVE-2018-4280, as well as several smaller vulnerabilities in other services, to execute code inside the ReportCras...

CVE-2026-46331-pedit-COW-detection

CVE-2026-46331 pedit COW – Linux LPE Validation and auditd/AppArmor Detection Defensive validation report for CVE-2026-46331, focused on Linux kernel actpedit, local privilege escalation behavior, auditd telemetry, AppArmor mitigation, and detection logic. Repository description This repository...

CVE-2022-0847

CVE-2022-0847 my personal poc and exploit of CVE-2022-0847dirty pipe Usage POC: write files arbitrarily Just a simply POC of this CVE, compile the file poc.c as follow: $ gcc poc.c -o poc -static You shall run it as follow: ./poc targetfile offsetinfile data You shall make sure the destination fi...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

fibratus

Fibratus Security sensor for realtime threat detection and protection Get Started » Docs • Rules • Filaments • Download • Discussions Fibratus detects and eradicates advanced attacker tradecraft, malware, and emerging threats by scrutinizing and asserting a wide spectrum of system events against ...

CVE-2015-8543_for_SLE12SP1

$cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" $id uid=1000jeremysp1 gid=100users groups=100users $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i sh-4.2 /home/jeremysp1/nullpointerderf/exp +...

BestEdrOfTheMarket

Mejor EDR del Mercado BEOTM V3 🐲🏴‍☠️ Best Edr Of The Market es un laboratorio de código abierto diseñado para implementar y comprender, desde una perspectiva de bajo nivel, los métodos de detección utilizados por los productos de seguridad de detección y respuesta de endpoints EDR y sus soluciones...

Imperius

Imperius Haz visible nuevamente un rootkit LKM. Implica obtener la dirección de la función "moduleshow" de un rootkit, por ejemplo el rootkit diamorphine, y utilizarla para llamarla, añadiéndola de nuevo a lsmod, haciendo posible eliminar un rootkit LKM. Podemos obtener la dirección de la función...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit A proof-of-concept local privilege escalation exploit for CVE-2021-3493, written in C. 📌 Description This repository contains a C implementation of the exploit for CVE-2021-3493. This is a Local Privilege Escalation LPE vulnerability in the OverlayFS implementation in the...

CVE-2026-31431-Linux-Copy-Fail

🛡️ CVE-2026-31431-Linux-Copy-Fail - Execute Custom Shellcode With Ease 📌 Project Overview This software provides a tool to test the Linux CVE-2026-31431 vulnerability. It uses the Rust programming language to interact with system files. The program allows users to run custom shellcode on targeted...

CVE-2022-0492-Docker-Breakout-Checker-and-PoC

CVE-2022-0492 Docker Breakout Checker and PoC Summary Exploiting the vulnerability requires the attacker to have access to a Docker container running on a vulnerable system. Once exploited, the attacker can escape the container and gain complete control over the host system. A vulnerability was...

libmsm_vfe_read_exploit

Read kernel mermory with CVE-2014-4321...

cve-2021-33909

Kernel runtime fix of CVE-2021-33909 This repository builds an out-of-tree module named "cve-2021-33909.ko". cve-2021-33909 fixes an issue in the kernels filesystem layer by kprobe-replacing vulnerable functions during runtime. It can be build via "make", setting KDIR to the kernels...

CVE-2021-27965

CVE-2021-27965 The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request. This exploit will be finished, this is a guarantee...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project The project documents the completion and analysis of the Fragnesia CVE-2026-46300 TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached...

ProyectoFinalSO

Final Project — Operating Systems 2026-2 Author: Reyna Mendez Cristian Ignacio Requirements GitHub account with access to GitHub Codespaces Approximately 10 GB of free space in the Codespace kernel compilation Approximately 20 minutes to compile Step 1 — Clone and open in Codespaces git clone...

CVE-2026-64600-Refluxfs-PoC

RefluXFS CVE-2026-64600 PoC This repo contains a PoC of the recently discovered race condition vulnerability affecting COW on XFS reported by the excellent Qualys Security Team. 1 2 PoC info Handwritten based off of the excellent analysis in the Qualys advisory. Rewrites the first 4KB of the...

CVE-2020-14372

CVE-2020-14372: Bypassing not so Secure Boot with one "simple trick" Vulnerability details One day I typed "help" into GRUB2's console and saw some really "fun" commands: readbyte ADDR: Read 8-bit value from ADDR writebyte ADDR VAL: Write 8-bit value VAL to ADDR I immediately thought I found the...