sudo_patch_CVE-2025-32463

sudopatchCVE-2025-32463 Mr.CIA's manual patching guide for CVE-2025-32463 Sudo local privilege escalation tested on Kali Linux and Ubuntu WSL. CVE-2025-32463 Sudo Patch Guide 🛡️ Eish, CVE-2025-32463 is a nasty local privilege escalation flaw CVSS 9.3 in Sudo 1.9.14–1.9.17, exploitable via the...

Xiaomi-C200-Firmware-Analysis

The Scope In this repo i will show how i got access to the UART interface even without the common set of exposed pins / test pads, using U-Boot and tricks to gain root on an early stage and eventually dumping the firmware Initial Reconnaissance There are a few key things clear from the PCB Chip...

Mediatrix-CVE-2022-43096

CVE-2022-43096 CVSS v3.1 Vector: AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N 7,3 Description Mediatrix 4102 before v48.5.2718 allows local attackers to gain root access via the UART port. Vulnerability Type Incorrect Access Control Vendor of Product Mediatrix Affected Product Code Base Mediatrix 4102 -...

exploit_CVE-2021-3560

CVE-2021-3560 Exploit Script This script exploits CVE-2021-3560, a vulnerability in polkit that allows privilege escalation to root. Usage After cloning the repository, grant execution permissions and run the script: root@kitploit: chmod +x exploit.sh ./exploit.sh Expected Outcome After running t...

CVE-2021-4034

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class. https://bugs.launchpad.net/apport/+bug/1438758 Bonus opportunities http://matt.might.net/teaching/compilers/spring-2015/ Use an exploit on vulcan to gain root access: +10% for a local user...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

CVE-2021-4034

CVE-2021-4034 pkexec The use of this python script exploits the vulnerability in the pkexec file to gain root access without providing credentials · Detects if the binary has SUID privileges, in which case it is vulnerable root@kitploit: usuario@gatogamer $ ls -la /usr/bin/pkexec .rwsr-xr-x 1 roo...

exploit-CVE-2021-3560

Exploit for CVE-2021-3560 Polkit - Local Privilege Escalation Like this repo? Give us a ⭐! For educational and authorized security research purposes only. Exploit Author @UNICORDev by @NicPWNs and @Dev-Yeoj Vulnerability Description It was found that polkit could be tricked into bypassing the...

CVE-2021-3560

CVE-2021-3560 Polkit - Local Privilege Escalation Original discovery by kevinbackhouse from GitHub Security Lab References https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/ https://www.youtube.com/watch?v=QZhz64yEd0g https://ubuntu.com/security/CVE-2021-3560 Blog...

Magisk

This is not an officially supported Google product Introduction Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0. Some highlight features: MagiskSU : Provide root access for applications Magisk Modules : Modify read-only partitions by...

CVE-2024-3400

CVE-2024-3400 CVE-2024-3400 Palo Alto OS Command Injection send this HTTP request: root@kitploit: POST /ssl-vpn/hipreport.esp HTTP/1.1 Host: 127.0.0.1 Cookie: SESSID=/../../../var/appweb/sslvpndocs/global-protect/portal/images/hellome1337.txt; Connection: close Content-Type:...

MagiskEoP

Introduction This is an exploit for a vulnerability CVE-2024-48336 in Magisk app that allows a local app to silently gain root access without user consent. Vulnerability was initially reported by @vvb2060 and PoC-ed by @canyie. It has been fixed in Canary 27007. Demo video for exploit this...

copy-fail-mcp

Copy Fail MCP 📖 安装指南 — 快速上手、手动安装和故障排除 CVE-2026-31431 — 有史以来最严重的 Linux 漏洞。现在可通过 MCP 控制。 732 字节的 Python。无需编译。无竞态条件。无需按发行版区分的偏移量。 一次执行，即可在 2017 年以来构建的所有 Linux 内核上通用提权至 root。 该工具是一个 MCP 服务器 + Web 仪表板，用于测试任何可达的 Linux 系统是否存在此漏洞。它的诞生是因为原始 PoC 已经非常易于使用——这只是额外增加了界面、网络扫描和主机群跟踪功能。 警告： 这是一个真实的内核...

Exploit11.2

Exploit11.2 针对 iOS 11.2.x 的漏洞利用程序，由 ZIMPERIUM 开发，由我部分完成。基于 CVE-2018-4087 的沙箱逃逸。同时也会检查未完成的 root 权限获取。 你可以创建一个应用来在你的设备上运行该漏洞利用（如果你是一名开发者），并开启 root 权限 @。 感谢： •RaniXCH、Adam Donenfeld、Abraham Masri 以及 ZIMPERIUM 团队。 •th0ex 和 x0x8os 与我合作。...

CVE-2025-41244

CVE-2025-41244 VMware Aria Operations 和 VMware Tools 包含一个本地权限提升漏洞。具有非管理员权限的恶意本地攻击者，如果能够访问安装了 VMware Tools 且由启用了 SDMP 的 Aria Operations 管理的虚拟机，则可能利用此漏洞将同一虚拟机上的权限提升至 root。 如何运行此脚本？ 1. 从此处下载 Nuclei 2. 将模板复制到你的本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考链接...

CVE-2022-37706-LPE-exploit

CVE-2022-37706 大家好，这次我要介绍一个我在 Linux 主要窗口管理器之一 Enlightenment（https://www.enlightenment.org/）中发现的近期 0-day 漏洞。这个 0-day 漏洞可以让任何用户非常轻松且即时地获取 root 权限。该利用程序已在 Ubuntu 22.04 上测试，但应该在任何发行版上都能正常工作。 首先，Enlightenment 是 Linux（主要平台）、BSD 及其他兼容 UNIX 系统的窗口管理器、合成器及极简桌面环境。...

CVE-2022-22639

详情 参见博客： https://www.trendmicro.com/enus/research/22/d/macos-suhelper-root-privilege-escalation-vulnerability-a-deep-di.html CVE-2022-22639 的利用 1. 使用命令编译： clang exploit.m -o /tmp/exploit -framework Foundation -fobjc-arc -fobjc-link-runtime...

CVE-2026-41940

CVE-2026-41940：cPanel/WHM 身份验证绕过（单目标与多目标） 免责声明： 本文档及关联脚本（exploit.py）仅用于教育目的、安全研究和授权渗透测试。请勿将该软件用于您不拥有或未经明确许可测试的系统。 概述 exploit.py 是一个演示 cPanel 与 WHM 中身份验证绕过漏洞（CVE-2026-41940）的脚本。该漏洞允许未认证的攻击者通过 CRLF 注入缺陷，将 root 会话注入守护进程缓存，最终在无需有效凭据的情况下获得 root 级 WHM 访问权限。 漏洞分析与利用流程 该漏洞利用 Basic Authentication 处理机制中的...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...