NfSpy

NfSpy - an ID-spoofing NFS client by Daniel Miller NfSpy is a Python library for automating the falsification of NFS credentials when mounting an NFS share. Included are two client programs: nfspy uses the Filesystem in Userspace FUSE library to mount an NFS share in Linux. This allows the use of...

phantom-playbooks

This is the Corelight Repository for Community Playbooks developed for Splunk Phantom. These provide some examples for you to craft your own playbooks. Corelight Investigate DNS Alert This playbook takes a saved search or alert mechanism for DNS from Splunk and pulls the Zeek UID for the alerts. ...

PoC

Leveraging CVE-2018-19788 to dump protected files without root shell CVE-2018-19788 is an issue where any user with a UID over INTMAX IE 4000000000 can run any systemctl command on a systemd linux box, such as Ubuntu. There is already a writeup to gain a root shell found: here. The main differenc...

socid-extractor

socidextractor Turn any public profile page into a structured account record — usernames, display names, bios, avatars, locations, joined-at dates, follower counts, external links, and the stable internal identifiers that uniquely pin an account across renames, redesigns, and deletions...

kernel-exploits

Kernel Exploits Various kernel exploits CVE-2021-22555 Linux local root exploit. Updated version of theflow's exploit for CVE-2021-22555. A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a D...

CVE-2018-19788

CVE-2018-19788 Exploiting The CVE-2018-19788 PolicyKit Bug Steps to exploit PolicyKit bug on a fully patched CentOS7 installation. root@centos7 groupadd -g 4000000000 cve201819788 root@centos7 useradd -m -c "User With High UID" -u 4000000000 -g 4000000000 -s /bin/bash cve201819788 root@centos7 id...

myfactory FMS - Cross-Site Scripting

myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. id: CVE-2021-42565 info: name: myfactory FMS - Cross-Site Scripting author: madrobot,daffainfo severity: medium description: | myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. impact: |...

CVE-2022-0847

gcc exploit.c -o exploit -std=c99 ./exploit Usage: ./exp TARGETFILE OFFSET DATA In the /etc/passwd file, find the offset of the normal user's uid, change the uid to 0, then log in again to get root privileges. Scope of Impact Linux Kernel version = 5.8 Linux Kernel version 5.16.11 / 5.15.25 /...

CVE-2014-4322_adaptation

CVE-2014-4322adaptation Just an attempt to adapt for Note 4, I do not know what I am doing. There is currently a way to write to system using ADB CVE-2014-7951 and CVE-2014-7953. zxz0O0 has confirmed writing to system works. What we needed was to gain System UID to execute CVE-2014-4322. I am...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID. This vulnerability affects Android versions from 9 to 14 running on security patch level 2024-06-01 or lower. A support matrix of tested devices can b...

CVE-2023-0386

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...

CVE-2018-19788

Proof of Concept for the CVE-2018-19788 Ansible role to check the vulnerability tracked as CVE-2018-19788 that impacts PolicyKit version 0.115 which comes pre-installed on a wide range of Linux distributions such as Ubuntu, Red Hat, CentOs, to mention a few. Requirements Minimum required ansible...

EvilDroid

EvilDroid: Automated Exploit for CVE-2024-0044 EvilDroid is a sophisticated tool designed for automated exploitation of CVE-2024-0044 vulnerabilities. This script streamlines the process of exploiting vulnerable Android applications by automating the payload deployment and APK installation...

CVE-2018-19788

CVE-2018-19788 Silly easy exploit for CVE-2018-19788 To use this, you must either create a user with UID INTMAX in Policy Kit or already have a low-priv user with said UID. UID can be specified in user creation as follows, and used before execution of the script: $ useradd -u 4000000001 PrivEsc $...

rootkit-signal-hunter

Rootkit Signal Hunter Detect Linux rootkits which use signals to elevate process privileges. Some rootkits install signal handlers which listen for specific signals to elevate privileges. This tool can identify these rootkits by sending signals and observing UID switching to root. Optionally spaw...

Razer Sila Gaming Router - Remote Code Execution

A command injection in the command parameter of Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request. id: CVE-2022-29013 info: name: Razer Sila Gaming Router - Remote Code Execution author: DhiyaneshDK severity: critical descriptio...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: A cross-site scripting XSS reflected vulnerability in the evolution v.3.2.3 installation process connection allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the uid parameter. Attack Vectors...

ghostlock-pfem10

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文 GhostLock CVE-2026-43499 port for the OPPO Find X5 Pro on ColorOS 16. Reaches a uid=0 child process and a loaded kernelsu.ko; the root process is intercepted. Vulnerability CVE-2026-43499 — futex PI use-after-free. removewaiter clears...

ubuntu-cve-2019-14287-patch-manager

Ubuntu CVE-2019-14287 Patch Manager Ubuntu CVE-2019-14287 Patch Manager is a GUI-based lab tool for checking, mitigating, and verifying protection against CVE-2019-14287, a sudo privilege-escalation vulnerability. This project was developed for an Ubuntu 19.04 amd64 lab environment. Project Purpo...

docker_lightman_exploit

Docker Lightman Exploit Docker CVE-2022-37708. This exploit relies on how the UNIX filesystem has UID and GID on files that Docker shares between the Host running the Docker and the Client being run within the Docker as well as relies on the nature of how Process ID ownership works. The Problem i...