linux_injector

linuxinjector A simple ptrace-less shared library injector for x64 Linux. Usage linuxinjector mode 1. normal dlopen 2. memfd + dlopen for injecting into containers 3. raw shellcode pid Target process id. Must have ptrace rights to it required for accessing /proc/$pid/mem. Not ptraced, so another...

linux-4.19.72_CVE-2020-27815

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2025-32463_chwoot

🛠️ CVE-2025-32463chwoot - Securely Handle Privileges in Linux 📋 Overview CVE-2025-32463chwoot helps you understand and deal with a specific security vulnerability related to privilege escalation in Linux systems. This tool allows users to explore and test the escalation of privilege to the root...

vcheck

vcheck Audit a remote Linux host over SSH for the Copy Fail and Dirty Frag kernel-module vulnerabilities and, optionally, apply mitigations: CVE| Name| Affected modules ---|---|--- CVE-2026-31431| Copy Fail| algifaead CVE-2026-43284| Dirty Frag IPsec| esp4, esp6, ipcomp4, ipcomp6, xfrmuser...

CVE-2024-27398

CVE-2024-27398 CVE-2024-27398 POC 📍 GDB Breakpoints GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted ...

quipu

Quipu A desktop workbench for writing, validating, compiling, and testing YARA rules. Quipu pronounced “KEE-poo” brings a project explorer, a YARA-aware editor, the YARA-X compiler, and focused scan results into one local application. It embeds both YARA-X and its language server, so you do not...

CVE-2026-98319

A flaw was found in the Linux kernel's Direct Rendering Manager DRM subsystem. An error handling failure during display synchronization processing prevents allocated event memory from being released when an operation fails. A local user can exploit this vulnerability by submitting specific displa...

pegasus-neo

| \ | \ | | | | / / |/ / | | | / | | | | / / | | | \ \ | | \ \ |\ | || |, |,|/,|/| | |/ ███▄ █ ▓█████ ▒█████ ██ ▀█ █ ▓█ ▀ ▒██▒ ██▒ ▓██ ▀█ ██▒▒███ ▒██░ ██▒ ▓██▒ ▐▌██▒▒▓█ ▄ ▒██ ██░ ▒██░ ▓██░░▒████▒░ ████▓▒░ ░ ▒░ ▒ ▒ ░░ ▒░ ░░ ▒░▒░▒░ ░ ░░ ░ ▒░ ░ ░ ░ ░ ▒ ▒░ ░ ░ ░ ░ ░ ░ ░ ▒ ░ ░ ░ ░ ░ PEGASUS-NEO...

CVE-2026-98320

A flaw was found in the Linux kernel's netfilter subsystem. In the flowtable component, connection tracking reference counts are prematurely released before flow entries are fully removed from memory. An attacker could exploit this timing issue during network flow processing, triggering a...

CVE-2026-98318

A flaw was found in the Linux kernel's SMB Server Message Block client. When handling absolute symbolic links on mounted shares, the client fails to validate the link target format before applying Windows NT path adjustments. A user with write access to a mounted share can exploit this...

CVE-2024-1086

CVE-2024-1086 Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images...

CVE-2026-98317

A flaw was found in the Linux kernel. A local user with network configuration privileges can cause a Denial of Service DoS by supplying out-of-range neighbor probe interval values via Netlink or sysctl. Because the kernel fails to properly validate these boundary values, an integer overflow occur...

ptrace_scope-CVE-2019-13272-privilege-escalation

CVE-2019-13272 It is a privilege escalation vulnerability in Linux. Even now, in most Linux distros it has not been fixed. To run the exploit, you only need to have gdb installed. In the releases I will leave gdb binaries for some architectures. I have based it on the exploit made by s4vitar, but...

CVE-2026-64468

CVE-2026-64468 — Linux kernel Binder binderfreetransaction process-lifetime use-after-free This repository contains, for the Linux kernel Binder use-after-free fixed by upstream commit f223d27a546c1e1f48d38fd67760e78f068fe8c4: binderchain64468.c — an unprivileged proof of concept that reaches the...

pentest-copilot

Pentest Copilot An open-source, AI-driven penetration testing agent. Connects to a Kali attack box, runs tools autonomously, analyzes results, and iterates. You describe the target. It does the rest. Built for real-world engagements, boot2root boxes, and CTFs. In Action Pentest Copilot performing...

CVE-2022-0847-dirty-pipe-kernel-checker

CVE-2022-0847-dirty-pipe-kernel-checker Python script to check if your kernel is vulnerable to Dirty pipe CVE-2022-0847 You can execute directly the script on your system and it will find your kernel version But you can execute the script with as argument a kernel version to check 3 digit kernel...

WAVLINK WN530H4 live_api.cgi - Command Injection

A remote command-line injection vulnerability in the /cgi-bin/liveapi.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without authentication. id: CVE-2020-12124 info: name: WAVLINK WN530H4 liveapi.cgi - Command Injection author...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...