copyfail-arm64

Copy Fail ARM64 Research CVE-2026-31431 Analysis and ARM64 reproduction of the Copy Fail Linux kernel privilege escalation vulnerability CVE-2026-31431, originally disclosed by Xint. Blog post: docs/post.md What's Included File| Description ---|--- docs/post.md| Blog post covering the vulnerabili...

CVE-2026-40003

CVE-2026-40003 aka Joselito is arbitrary memory write vulnerability found in the ZXIC/Sanechips ZX297520V3 SoC BootROM. !CAUTION This PoC has been published for research purposes only. You must NOT use this exploit for any malicious purposes. Do NOT use the exploit on devices you do not own or...

CVE-2026-31431-Copy-Fail

CVE-2026-31431 — "Copy Fail": Escalada de Privilegios Local en el Kernel de Linux algifaead CISA KEV | CVSS 7.8 ALTO | Afecta a kernels de Linux 4.14 – principios de 2026 9 años Tabla de Contenidos 1. Resumen Ejecutivo 2. Evaluación de Riesgo 3. Análisis Técnico Detallado 4. Metodología de Ataque...

Estudo-de-Caso-CVE-2026-31431-CopyFail

🐧 CVE-2026-31431 — CopyFail: Linux Kernel Privilege Escalation Complete Case Study — How it was discovered, how it works, how to test, how to replicate in a safe environment and how to fix the critical vulnerability that affects almost all Linux distributions since 2017. 🚨 Legal Notice / Disclaim...

sorry-ransomware-analysis

Sorry Ransomware Analysis CVE-2026-41940 cPanel Campaign Public IOC pack, YARA rules, forensic scripts and analysis methodology for the "Sorry" ransomware .sorry extension family that emerged in late April 2026, spread via the cPanel/WHM authentication bypass CVE-2026-41940. ⚠️ Files encrypted by...

CVE-2026-31431

CopyFail2 CVE-2026-31431 - Python Implementation Python port of the CopyFail2 kernel exploit leveraging xfrm ESP-in-UDP MSGSPLICEPAGES no-COW fast path for unprivileged Linux local privilege escalation. Replaces a nologin/false entry in /etc/passwd with a passwordless uid-0 user and drops into a...

cve-2026-31431-copyfail

CVE-2026-31431 — "Copy Fail" 🔐 Análisis técnico educativo de una de las vulnerabilidades más significativas del kernel Linux desde Dirty Pipe 2022. Este repositorio está orientado a investigación, estudio y defensa. Aquí no se distribuye ningún exploit funcional. Índice ¿Qué es? Para profanos: la...

cve-2026-0300-audit

CVE-2026-0300 Audit Tooling Read-only audit tooling for CVE-2026-0300 — the unauthenticated buffer overflow in the PAN-OS User-ID Authentication Portal formerly known as "Captive Portal" on PA-Series and VM-Series firewalls. This repo accompanies Tailwind Resource Group security advisory...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass This directory contains a Python proof of concept for CVE-2026-0073. The script is generated using AI-assisted code generation techniques. Summary CVE-2026-0073 is a logic issue in ADB daemon certificate verification adbdtlsverifycert in auth.cpp. Th...

CopyFail-Penguin

CopyFail Penguin A safe Linux security checker for CopyFail/CVE-2026-31431. Purpose CopyFail Penguin checks basic Linux system information and possible exposure indicators related to the CopyFail vulnerability. This project is intended for learning, awareness, and defensive system administration...

CVE-2026-31431

CVE-2026-31431: "Copy Fail" - Linux Kernel Local Privilege Escalation 📢 Disclaimer This repository is strictly for educational and cybersecurity research purposes. The exploit code is analyzed to understand the underlying vulnerability, facilitate patching, and develop defensive strategies. Do no...

CopyFail-Exploits-CVE-2026-31431

CVE-2026-31431 — Copy Fail Educational repository with multi-language implementations of the Copy Fail exploit. Created and maintained by @shotafry — because reading the CVE is not enough. You have to reproduce it. 📖 Leer en Español Table of Contents What is Copy Fail? Who discovered it? Severity...

pixel-ksu-root

pixel-ksu-root Root a stock, locked-bootloader Google Pixel from an unprivileged adb shell, using a kernel CVE — no unlock, no flash, no vendor help. A userspace-reachable CVE gives a short-lived kernel read/write primitive, which late-loads a KernelSU module kernelsu.ko into the running GKI...

CVE-2026-41940

CVE-2026-41940 Auto Exploit Overview CVE-2026-41940 is a proof-of-concept PoC exploit targeting cPanel/WHM. This exploit demonstrates an unauthenticated authentication bypass using CRLF injection to leak security tokens and gain root-level access to the WHM interface, allowing for actions such as...

cpanel-pwn

cpanel-pwn cPanel/WHM security testing toolkit. Implements the CVE-2026-41940 CRLF injection authentication bypass and post-exploitation privilege pivoting. Tools Script| Purpose ---|--- cpanelexploit.py| CVE-2026-41940: CRLF injection → WHM auth bypass → root access CVE-2026-41940 Type: CRLF...

CVE-2026-41940-Exploit-PoC

CVE-2026-41940 Exploit PoC – Bypass de Autenticación en cPanel & WHM Herramienta por: Ishan Oshada | GitHub ⚠️ SOLO PARA PRUEBAS DE SEGURIDAD AUTORIZADAS. El uso no autorizado es ilegal. 📋 Tabla de Contenidos Resumen de la Vulnerabilidad Cadena de Explotación Características Instalación Inicio...

GhostShell

GhostShell CVE-2026-31431 — Local Privilege Escalation via Linux Kernel Page Cache Corruption GhostShell is a local privilege escalation tool that exploits a flaw in the Linux kernel's authencesn AEAD crypto implementation to obtain a root shell from an unprivileged user account. It corrupts the...

dlink-dir-819-dos

CVE-2022-40946 Exploit: Denegación de Servicio No Autenticada en routers domésticos DLink DIR 819 A1 Exploit Obtener las fuentes root@kitploit: $ git clone https://github.com/whokilleddb/dlink-dir-819-dos $ cd dlink-dir-819-dos $ pip install -r requirements.txt Ejecutar el exploit root@kitploit: ...

CVE-2026-29000

CVE-2026-29000 CVE-2026-29000: Omisión crítica de autenticación en pac4j-jwt - Usando solo una clave pública CVSS 10 Exploit de omisión de autenticación en pac4j-jwt CVE-2026-29000 Resumen de la vulnerabilidad CVE-2026-29000 es una omisión crítica de autenticación en la librería pac4j-jwt version...

CVE-2025-4476-Exploit

Exploit CVE-2025-4476 Un pequeño cliente de prueba en Python para enviar solicitudes HTTP GET con una cabecera Authorization: Basic de tamaño excesivo. Esta herramienta está destinada a pruebas de laboratorio e investigación sobre problemas de análisis de cabeceras por ejemplo, errores de...