multicast_bytecopy

multicastbytecopy Questo codice è pubblicato per i ricercatori di sicurezza, non utilizzare questo codice per alcuno scopo se non sai cosa stai facendo. multicastbytecopy è un exploit di lettura/scrittura del kernel per iOS 15.0 - 15.1.1 di @jaakerblom ed è il successore spirituale di...

CVE-2024-38063

CVE-2024-38063 PoC | DKob & N3TCR4SH Overview This script is a Proof of Concept PoC for exploiting CVE-2024-38063. It generates and sends malicious fragmented IPv6 packets with specific destination options to target a kernel, potentially causing denial-of-service or instability. Article Link: Her...

linux-4.19.72_CVE-2020-27815

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

Interceptor

Interceptor Author: @Cerbersec Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space by patching kernel callbacks and hooking IRPs. Interceptor was made as part of an internship at NVISO Security's Red Team. The associated blogposts can be found here kernel...

vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 POC 📍 GDB Breakpoints GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted ...

F9360-CVE43499

SM-F9360 Galaxy Z Fold4 / q4q Bootloader-Unlock-Free KernelSU Root CVE-2026-43499 temporary root → LDPRELOAD channel bypasses DEFEX → no-LTO clang-12 build of kernelsu.ko → full su + KernelSU Manager functionality Status: ✅ Verified on real device 2026-08-12 firmware F9360ZCSAIZF1, kernel...

CVE-2026-98319

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. An error handling failure during display synchronization processing prevents allocated event memory from being released when an operation fails. A local user can exploit this vulnerability by submitting specific displa...

CVE-2026-98318

A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...

extra_recipe

// ianbeer kernel arbitrary read/write exploit for CVE-2017-2370 for iOS 10.2 Only tested on iPod Touch 6G 14C92 - other devices/firmwares will not work out of the box! the bug machvoucherextractattrrecipetrap is a mach trap which can be called from any context. It's brand new code, added in iOS...

iOS-Kernel-Crash

CVE-2018-4407 Memory Corruption The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and Macbooks are all affected. My exploit PoC just overwrites the heap with garbage, which causes ...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2026-98317

A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...

kernel-mii

Cobalt Strike Beacon Object File foundation for kernel exploitation using CVE-2021-21551. Built by Tijme. Credits to Alex for teaching me! Made possible by Northwave Security Description This is a Cobalt Strike CS Beacon Object File BOF which exploits CVE-2021-21551. It only overwrites the beacon...

CVE-2026-64468

CVE-2026-64468 — Linux kernel Binder binderfreetransaction process-lifetime use-after-free This repository contains, for the Linux kernel Binder use-after-free fixed by upstream commit f223d27a546c1e1f48d38fd67760e78f068fe8c4: binderchain64468.c — an unprivileged proof of concept that reaches the...

GhostLock-GOT-W29

CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 Privilege escalation research on CVE-2026-43499 rtmutex/futex-PI stack UAF, "GhostLock" for the GOT-W29 HarmonyOS 4.0, kernel 4.19.157-perf+. Final Conclusions 1. The vulnerability is real and triggerable : a value-holding PI cycle makes...

CVE-2022-0847-dirty-pipe-kernel-checker

CVE-2022-0847-dirty-pipe-kernel-checker Python script to check if your kernel is vulnerable to Dirty pipe CVE-2022-0847 You can execute directly the script on your system and it will find your kernel version But you can execute the script with as argument a kernel version to check 3 digit kernel...

Disk-Spoofer

Disk-Spoofer Kernel driver based disk size and sector query spoofing program, can evade Windows WMIC query. Environmental dependence windows10 22H2 vs2019 Cheat off If can help you, please Star...

CVE-2024-30804

ASUS Driver LPE PoC Physical Memory Abuse This is a PoC for Local Privilege Escalation LPE that exploits the AsInsHelp64.sys driver. It abuses a legitimate, signed ASUS driver to map physical memory and overwrite kernel tokens, eventually gaining NT AUTHORITY\SYSTEM privileges. 🎯 Vulnerability In...

cve-2019-6207

CVE-2019-6207 $ clang exploit.c -o exploit $ ./exploit CVE-2019-6207 exploit to leak 4 bytes of arbitrary kernel memory Tested on MacOS 10.14.1, should works on: MacOS wop != NETRTDUMP2 int size = rtmsg2RTMGET, &info, NULL, w, credp; if w-wreq != NULL && w-wtmem != NULL struct rtmsghdr rtm = stru...