dirtyPipe-automaticRoot

Dirty Pipe automatic root exploit CVE-2022-0847 Dependencies: Python 3.10 or above How to use: Automatic root: $ python3.10 dirtyPipe.py -a + hjacking super user in /etc/passwd + dropipng shell Write a no write permission, immutable or read-only mounted file: $ python3.10 dirtyPipe.py -w FILE...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Informe del Ejercicio de Detección en Laboratorio Clasificación: Laboratorio Interno - CyberLAB Fecha: 24 de mayo de 2026 Plataforma: Elastic Stack v9.4.1 Estado: Detección Confirmada Índice de Contenidos A - Resumen Ejecutivo B - Informe Completo de Hallazgos 1...

cve-2026-29923

CVE-2026-29923 — pstrip64.sys Local Privilege Escalation A minimal proof-of-concept for CVE-2026-29923, a vulnerability in the pstrip64.sys kernel driver EnTech Taiwan PowerStrip ≤ 3.90.736 that allows an unprivileged user-mode process to escalate to NT AUTHORITY\SYSTEM. The Bug pstrip64.sys...

af_packet.c

afpacket.c Prueba de concepto para verificar los privilegios de afpacket.c con el fin de validar los privilegios adquiridos por cualquier hacker tras una explotación exitosa de CVE-2021-22600 Es solo una muestra de prueba de concepto generada por un LLM y no cubre todos los casos. La idea básica...

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ / \ ║ ║ | || | ...

rootkit-detection-ebpf-time-trace

Detección de Rootkits con Trazado Temporal eBPF Este repositorio contiene código para recolectar mediciones de tiempo de funciones del kernel que son manipuladas por rootkits cuando ocultan archivos, así como un método de detección semi-supervisado que analiza desplazamientos de los tiempos de...

Detection-and-Mitigation-for-CVE-2022-2639

Detection-and-Mitigation-for-CVE-2022-2639 Description The Open vSwitch kernel module allows flexible userspace control over flow-level packet processing on selected network devices. It can be used to implement a plain Ethernet switch, network device bonding, VLAN processing, network access...

NORM-EDR

NORM-EDR NORM Normal EDR is an experimental kernel-mode EDR research project focused on explainable detection rather than silent blocking. Instead of assigning scores or killing processes, NORM answers one question: Why does this binary look suspicious? This project is built step-by-step in publi...

AutoPiff

AutoPiff Marco Automatizado de Inteligencia y Detección de Parches Un motor de análisis semántico para detectar correcciones de vulnerabilidades en parches de controladores del kernel de Windows. AutoPiff utiliza reglas YAML conservadoras para identificar cambios de código relevantes para la...

Windows-11-24h2-Kernel-Exploit

Windows-11-24h2-Kernel-Exploit Windows 11 24h2 LPE Kernel Exploitation. CVE-2020-12446eneio64.sys...

CVE-2018-17182

CVE-2018-17182 Linux kernel VMA-UAF privilege escalation vulnerability CVE-2018-17182 About Google Project Zero cybersecurity researchers have released details and a proof-of-concept PoC exploit for a high-severity vulnerability in the Linux kernel that has been present since kernel versions 3.16...

CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 5.1.17 PTRACETRACEME local root CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtai...

CVE-2026-42980-POC

CVE-2026-42980 Disclosure Público Este repositorio contiene el material público de disclosure para CVE-2026-42980 , una vulnerabilidad de integer underflow en WMI del kernel de Windows que puede explotarse para elevación local de privilegios hasta NT AUTHORITY\SYSTEM en builds vulnerables de...

DriverBuddyReloaded

Driver Buddy Reloaded Tabla de Contenidos Driver Buddy Reloaded Tabla de Contenidos Instalación Uso Rápido Uso Avanzado Acerca de Driver Buddy Reloaded Encontrando DispatchDeviceControl Etiquetando Estructuras WDM y WDF Encontrando y Decodificando Códigos IOCTL Señalando Funciones Encontrando...

DirtySlide

DirtySlide Unprivileged → root macOS LPE. An 8-byte OOB read/write into kernel memory adjacent to a dyld shared-cache page, from a missing in-page bounds check in the v5 slide walk vmsharedregionslidepagev5, reachable via syscall 536. Patched in macOS 26.5.2 25F84, xnu-12377.121.10. Vulnerable...

linux-kernel-exploitation

Linux 内核漏洞利用 一组与 Linux 内核安全和漏洞利用相关的链接集合。 每两个月更新一次。也欢迎提交 Pull Request。 在 X 上关注 @andreyknvl，在 Mastodon 上关注 @[email protected]，或在 Bluesky 上关注 @andreyknvl，以获取更新通知。 在 Telegram、X、Mastodon、Bluesky 或 Reddit 上订阅 @linkersec，获取精选内容。 培训 参见 xairy.io/trainings/。 目录 书籍 技术 漏洞利用 保护绕过 漏洞 信息泄露 本地提权 远程代码执行 KVM ...

bad-epoll

Bad Epoll: The bug missed by Mythos An unprivileged process escalating to root on Google kernelCTF. Bad Epoll CVE-2026-46242 is a race-condition use-after-free in the Linux kernel's epoll subsystem. This bug lets an unprivileged process become root, not only on Linux desktops and servers but also...

device_renesas_kernel_AOSP10_r33_CVE-2022-0492

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2024-27815

CVE-2024-27815 XNU kernel heap buffer overflow in sbconcatmbufs bsd/kern/uipcsocket2.c, reachable by an unprivileged local user over the AFUNIX datagram socket layer. A socket address of up to SOCKMAXADDRLEN 255 bytes is copied into an mbuf data area only MLEN 224 bytes long, overwriting up to 31...

freebsd_kernel_hacking

FreeBSD Kernel Hacking Exercises from Joseph Kong's Designing BSD Rootkits, updated for FreeBSD 11/12. Even though the book is over 10 years old, it's highly recommended as it's quite a challenge to update the source code provided in the book to work on modern releases. Further Resources:...