dirtycow-lab

Dirty COW PoC Educativo CVE-2016-5195 ⚠️ Advertencia Legal Este código es SOLO CON FINES EDUCATIVOS. Cualquier uso malicioso está estrictamente prohibido y es ilegal. 📖 ¿Qué es Dirty COW? Dirty COW CVE-2016-5195 es una vulnerabilidad de escalada de privilegios en el kernel de Linux que explota una...

ClearSword

ClearSword Overview A DarkSword Kernel exploit C port I tried to keep it as close to the original as possible, but had to do a few changes to make it work in earlier iOS versions. These changes and personal modifications will be denoted by NOTE comments. I've added line comments to basically ever...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start root@kitploit: Download the Repo = run npm i Afer Installing all dependency just run the application root@kitploit: node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4...

CVE-2021-3560

CVE-2021-3560 Análisis de escalada de privilegios local por condición de carrera en PolKit toc Resumen de la vulnerabilidad Identificador de vulnerabilidad: CVE-2021-3560 Puntuación de vulnerabilidad: Producto vulnerable: linux PolKit polkitd Alcance afectado: introducido en el código fuente 0.11...

NotSecDrv

NotSecDrv - A PoC code for CVE-2018-7249 General Description An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc. Two carefully timed calls to IOCTL 0xCA002813 can cause a race...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: root@kitploit: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build t...

CVE-2024-6387

cve-2024-6387-poc una condición de carrera en el manejador de señales en el servidor OpenSSH sshd...

CVE-2016-5195

CVE-2016-5195 gcc -pthread dirty.c -o dirty -lcrypt Enlace de referencia https://github.com/FireFart/dirtycow/blob/master/dirty.c...

CVE-2022-2602-Kernel-Exploit

CVE-2022-2602-Exploit-del-Kernel Detalles https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR La vulnerabilidad es un Use-After-Free que afecta la funcionalidad de descriptor de archivo registrado en el subsistema...

CVE-2026-68398

CVE-2026-68398: Ubuntu PPPoL2TP use-after-free to local root This repository contains a build-specific local privilege-escalation exploit for CVE-2026-68398 , a use-after-free race between PPPoL2TP receive processing and destruction of an unattached PPP channel. It was validated in QEMU against t...

collateral-damage

Daño Colateral Daño Colateral es un exploit de kernel para Xbox SystemOS que utiliza CVE-2024-30088. Está dirigido a consolas Xbox One y Xbox Series con versiones de kernel 25398.4478, 25398.4908 y 25398.4909. El punto de entrada inicial es a través de la aplicación UWP Game Script. Los payloads ...

CVE-2023-32233

Building And Configuring The instructions below were tested under Ubuntu 23.04 Lunar Lobster. Installing Build Dependencies Run the following command to install the build dependencies: root@kitploit: sudo apt install gcc libmnl-dev libnftnl-dev Building Binary Run the following command to build t...

CVE-2014-0196

CVE-2014-0196 La función nttywrite en drivers/tty/ntty.c en el kernel de Linux hasta 3.14.3 no gestiona adecuadamente el acceso al controlador tty en el caso "LECHO & !OPOST", lo que permite a usuarios locales causar una denegación de servicio corrupción de memoria y fallo del sistema o escalar...

CVE-2025-54309__Enhanced_exploit

CVE-2025-54309Exploitmejorado Esta es una versión mejorada del POC del exploit creado originalmente por watchtowrlabs : https://github.com/watchtowrlabs/watchTowr-vs-CrushFTP-Authentication-Bypass-CVE-2025-54309 ¡un enorme agradecimiento a ellos!! Este exploit está destinado a fines de...

POC-CopyEscape-CVE-2026-17106

CopyEscape — PoC for CVE-2026-17106 Educational Proof of Concept of CopyEscape CVE-2026-17106, a TOCTOU race condition vulnerability in docker cp that allows a malicious container to write arbitrary files on the Docker host. Inspired by the original work of masasron , who discovered and documente...

CVE-2021-3156

CVE-2021-3156 PoC para CVE-2021-3156 desbordamiento de heap de sudo. Exploit por @gf256 también conocido como cts. Agradecimientos a r4j de super guesser por la ayuda. Crédito a Braon Samedit de Qualys por el aviso original. Video de demostración Nota importante La hora de modificación de...

CVE-2024-30088-

Debilidad: CWE-367: Condición de carrera de verificación en el momento de uso TOCTOU Fuente CVSS: Microsoft CVSS: 3.1 7.0 / 6.3...

CVE-2026-68138

CVE-2026-68138: Linux qdisc rate-table race to local root This repository contains a proof-of-concept local privilege-escalation exploit for CVE-2026-68138 , a race in the Linux traffic-control rate-table code. In the tested QEMU environment, the PoC escalates from an ordinary process with outer...

CVE-2026-64563_EXP

CVE-2026-64563EXP For experimental research only. The code for prefetch and nperm the memory reference set.gdb needs to be configured is not attached, and since it has not been optimized, the hit probability is low. The author noticed that the vulnerability author has already released relevant...

CVE-2024-6387-Updated-x64bit

CVE-2024-6387-Updated-x64bit Private x64 RCE exploit Python for CVE-2024-6387 02.07.2024 from exploit.in The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output. 🔥...