dirtcow

dirtcow Dirty Cow Linux Local Privilege Escalation Vulnerability Reproduction CVE-2016-5195 0、 Use the command uname -a to check the Linux kernel information 1、 Download the EXP to local/server 2、 Use the command gcc -pthread dirty.c -o dirty -lcrypt to compile dirty.c, generating an executable...

CVE-2023-32629

CVE-2023-32629 — OverlayFS Local Full Privilege Escalation OverlayFS Local Privilege Escalation - Full write-up to full escalation For educational and authorized security research purposes only. Severity: High Type: Local Privilege Escalation LPE Affected: Ubuntu kernels prior to May/June 2023...

airecon

Agente autónomo de pruebas de penetración impulsado por IA -orange.svg AIRecon es un agente autónomo de pruebas de penetración que combina un LLM de Ollama autoalojado con un sandbox Docker de Kali Linux , integración nativa con el proxy Caido , un pipeline estructurado RECON → ANALYSIS → EXPLOIT...

exploits

exploits CVE-2021-22600: Linux kernel LPE exploit CVE-2021-3156: Linux local privilege escalation through heap overflow in sudo Demo CVE-2021-3156: One shot exploit for heap overflow vulnerability in sudo CVE-2020-6507: Out of bounds write in V8. Chrome versions = 83.0.4103.97. RCE CVE-2020-16040...

CVE-2020-16898--EXP-POC

CVE-2020-16898 CVE-2020-16898 Vulnerabilidad de ejecución remota de código en TCP/IP de Windows EXP&POC Reproducción forforever：https://www.cnblogs.com/forforever/p/13846077.html poc CVE-2020-16898Checker-poc Comando: Iniciar PowerShell/CMD como administrador Powershell.exe -ExecutionPolicy...

automato

automato.rb automato uses native LDAP libraries to automate the collection and enumeration of various directory objects. This is incredibly useful during an internal penetration test. automato can also conduct password spraying attacks, and identify if a user is a local administrator against any...

glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

A flaw was found in the GNU C Library glibc. This vulnerability could allow an attacker with local access to trigger a heap buffer overflow by manipulating how the fopen function handles certain input. This could lead to minor disruptions in system operations or limited access to sensitive...

CVE-2019-0708-Exploit

CVE-2019-0708-Exploit Usando CVE-2019-0708 para Escalar Privilegios Localmente en Sistema Windows 10...

SdoKeyCrypt-sys-local-privilege-elevation

SdoKeyCrypt.sys - Local Privilege Elevation Vulnerability 1. What is SdoKeyCrypt.sys? SdoKeyCrypt.sys is a keyboard protection driver for a MMORPG, aka Massively-Multiplayer-Online-Role-Playing-Game, called MapleStory Online which is published by Shanda Group in China. The game's official website...

CVE-2020-1066-EXP

Referencia Esta vulnerabilidad es una vulnerabilidad de elevación de privilegios local por reemplazo de archivos arbitrarios causada por el manejo incorrecto de objetos de enlace simbólico por parte del servicio Windows CardSpace Declaración El autor proporciona el PoC únicamente con fines de...

neko-master

Neko Master See your network traffic clearly. Real-time monitoring · Traffic auditing · Multi-gateway support English | 中文 !IMPORTANT Disclaimer This project is a traffic analysis and visualization tool for local gateway environments. It does not provide any network access service, proxy...

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Tomcat AJP protocol file read / file include vulnerability exploit POC python3 port. Original python2 author: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi Usage python3...

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability

FHEM-6.0-Local-File-Inclusion-LFI-Vulnerability LFI in FHEM 6.0 allows an attacker to include a file, it can lead to sensitive information disclosure. CVE-2020-19360 https://vulners.com/cve/CVE-2020-19360 PoC To exploit vulnerability, someone could use...

local-llm-ctf

Local LLM CTF & Lab This repository is intended to be accompanied with the content at https://bishopfox.com/blog/large-language-models-llm-ctf-lab, which covers the goals of the research, explanations of the implementation, and a few results of the CTF...

opensuse-leap-privesc-exploit

CVE-2025-6018 + CVE-2025-6019 Exploit Chain This exploit was developed to solve a HackTheBox challenge targeting openSUSE Leap 15.6. Credits This exploit is based on the original research by the Qualys Security Team: Advisory: https://cdn2.qualys.com/2025/06/17/suse15-pam-udisks-lpe.txt...

CVE-2025-15368-Exploit

CVE-2025-15368 Exploit Tool SportsPress Plugin for WordPress = 2.7.26 - LFI & RCE Author: kazehere4you Date: 2026-02-11 Description This tool exploits a Local File Inclusion LFI vulnerability in the SportsPress plugin for WordPress versions up to and including 2.7.26. By leveraging the eventlist...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 Explotación de desbordamiento de búfer en el montón de vsysloginternal de glibc CVE-2023-6246 mediante la Teoría del Tiempo Convergente α = 0.0302011. Rociado de montón temporal de 33 capas + disparo con bloqueo de fase para una escalada de privilegios locales...

CVE-2025-32463

CVE-2025-32463: Sudo Privilege Escalation chroot Este repositorio contiene información y/o una prueba de concepto PoC sobre la vulnerabilidad CVE-2025-32463 , un fallo crítico de escalada de privilegios locales en la utilidad sudo. 📌 Descripción La vulnerabilidad permite a un usuario local obtene...

CVE-2026-84250

IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit this vulnerability to recover the root password and gain root privileges...

CVE-2026-84245

IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cpwrapper component. A low-privileged local user could exploit this vulnerability to gain root privileges and access or modify sensitive system files...