uptux

uptux Specialized privilege escalation checks for Linux systems. Implemented so far: Writable systemd paths, services, timers, and socket units Disassembles systemd unit files looking for: References to executables that are writable References to broken symlinks pointing to writeable directories...

CVE-2023-4911

CVE-2023-4911 这是针对 Looney Tunables Linux 权限提升漏洞的 PoC（概念验证）。本 PoC 基于 此 PoC。非常感谢 leesh3288。您可以在这里找到非常详细的分析文章，并在这里观看 IppSec 制作的精彩视频。 使用方法 检查系统是否存在漏洞 root@kitploit: env -i "GLIBCTUNABLES=glibc.malloc.mxfast=glibc.malloc.mxfast=A" "Z=printf '%08192x' 1" /usr/bin/su --help 需要说明的是，受影响的 glibc 版本（包括此版本）为...

bx2-writeups

Writeups de Seguridad Una colección de mis writeups de ciberseguridad que cubren: TryHackMe Hack The Box Escalada de Privilegios en Linux Seguridad de IA e Infraestructura CTFs Retos de Seguridad Autor: Nanashi Bx2...

thm-cybersec-portfolio

TryHackMe 笔记 — 网络安全作品集 个人笔记和已完成的 TryHackMe 房间总结。 作为 IT 安全角色学习参考和作品集使用。 已完成的房间 | 房间| 主题 ---|---|--- 01| Linux 权限提升| Linux 提权技术 02| Sudo 缓冲区溢出| CVE-2019-18634 03| OWASP Top 10 2025：IAAA 失败| 访问控制失效、认证失败、日志记录 04| OWASP Top 10 2025：应用程序设计缺陷| 配置错误、供应链、加密、不安全设计 05| OWASP Top 10 2025：不安全的数据处理| 加密失败、注入、反序...

python3-ansible-compat-26.8.0-1.1 on GA media (moderate)

python3-ansible-compat-26.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11509-1 Rating: moderate Cross-References: CVE-2026-11332 CVSS scores: CVE-2026-11332 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

Kioptrix-Level-3

🧨 Exploits Used This folder documents the exploits used durin...

Security update for python-sh (important)

openSUSE security update: security update for python-sh ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21516-1 Rating: important References: bsc1272424 Cross-References: CVE-2026-54552 CVSS scores: CVE-2026-54552 SUSE : 8.2...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract !tuxasse...

linux-privesc-linpeas

🐧 linux-privesc-linpeas End-to-end Linux privilege escalati...

Post_Exploitation_Privilege_Escalation

⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...

Post_Exploitation_Privilege_Escalation

⬆️ Week 05 — Post-Exploitation & Privilege Escalation Inter...

Linux-privesc-PoC

Linux Privilege Escalation PoC Lab Educational disclaimer...

Metasploit Wrap Up 05/29/2026

More Linux LPEs Hark the age of the Linux LPE has arrived. This week’s release follows up on recent work bringing new Linux LPEs to Metasploit users. Copy Fail seemed to have kicked off a trend of similar bugs and hot on its heels is Dirty Frag. Dirty Frag is actually two vulnerabilities in a...

Important: kernel-livepatch-6.12.79-101.147

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.12.79-101.147 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-5.10.251-248.983

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-5.10.251-248.983 Issue Correction: Please ensure you have live patching enabled. Run yum update...

Important: kernel-livepatch-6.1.170-213.321

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.1.170-213.321 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

Important: kernel-livepatch-6.1.163-186.299

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: net/rds: reset opnents when zerocopy page pin fails CVE-2026-43494 Affected Packages: kernel-livepatch-6.1.163-186.299 Issue Correction: Please ensure you have live patching enabled. Run dnf update...

CVE-2026-0251 GlobalProtect App: Local Privilege Escalation Vulnerabilities

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...

Active attack: Dirty Frag Linux vulnerability expands post-compromise risk

In this article 1. Why Dirty Frag matters 2. Technical overview 3. Exploitation scenarios 4. Mitigation guidance 5. Post-mitigation integrity verification 6. References A newly disclosed Linux local privilege escalation vulnerability known as “Dirty Frag” enables escalation from an unprivileged...