CVE-2026-31431

CVE-2026-31431 - Copy Fail PoC Educational Proof of Concept for CVE-2026-31431 , also known as Copy Fail , a Linux kernel local privilege escalation vulnerability involving the AFALG / algifaead cryptographic interface. !WARNING This repository is provided strictly for educational, defensive, and...

CVE-2021-4034-Linux

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

sudo-chroot

Description: Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. Local Privilege Escalation by sudo-chroot -R...

CVE-2026-32223-USBPrint-Exploit

CVE-2026-32223: Plug me If you can : Exploiting USB Printer Drivers in Windows Heap-based buffer overflow in Windows USB Print Driver usbprint.sys leading to Local Privilege Escalation LPE This vulnerability was discovered and reported by ENKI WhiteHat. Overview CVE-2026-32223 is a heap-based...

CVE-2026-30862

CVE-2026-30862 PoC - Privilege Escalation in Appsmith Proof-of-Concept for Privilege Escalation in Appsmith via Stored XSS Disclosure: Originally reported by me via GHSA-5hw4-whxv-6794 ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-30862...

pwnKit

pwnKit About: Title: pwnKit Description: Privilege escalation in Unix-like operating systems AUTHOR: drapl0n Version: 1.0 Category: Privilege Escalation Target: Unix-like operating systems Attackmodes: HID pwnKit is Privilege Escalation USB-Rubber-Ducky payload, which exploits CVE-2021-4034 in le...

CVE-2021-4034-Rust

CVE-2021-4034-Rust Linux LPE using polkit-1 written in Rust. Build instructions Install rust if you haven't already root@kitploit: git clone https://github.com/deoxykev/CVE-2021-4034-Rust cd CVE-2021-4034-Rust rustup target add x8664-unknown-linux-musl cargo build --release Vuln Check...

detect_CVE-2026-25177

detect-CVE-2026-25177 Production-safe scanner that detects exploitation of CVE-2026-25177 — the Active Directory SPN Unicode Collision vulnerability CVSS 8.8. This vulnerability allows any authenticated user with write-SPN permissions to escalate privileges to SYSTEM by injecting Unicode characte...

copy-fail-blocker

copy-fail-blocker 针对 CVE-2026-31431（“Copy Fail”）及 Dirty Frag 的 RxRPC 变体的 BPF-LSM 缓解方案，同时适用于依赖用户态访问内核侧就地加密路径（可通过 AFALG 或 AFRXRPC 套接字族访问）的类似权限提升漏洞。 一个小型 DaemonSet 在每个节点上将一个 BPF-LSM 程序附加到 socketcreate 钩子。该程序对任何用户态 socketAFALG, ... 或 socketAFRXRPC, ... 调用返回 -EPERM，无论进程能力、命名空间或 seccomp 配置文件如何。内核内部的...

pwnkit-scanner

PwnKit Scanner Check CVE-2021-4034 vulnerability This test is not 100% reliable, but it helps with a quick scan. How to use Linux Debian based systems: root@kitploit: wget https://raw.githubusercontent.com/codiobert/pwnkit-scanner/main/pwnkit-scanner-debian.sh -q -O - |bash How to use Linux Red H...

Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...

Copy_Grail

copygrail | copy-fail-CVE-2026-31431 copygrail is a compact, single-file C++ implementation of the CVE-2026-31431 "Copy Fail" local privilege escalation vulnerability. It showcases a clean AFALG + splice page cache corruption technique that can be used to overwrite a setuid binary and escalate...

CVE-2026-36981-Kernel-EoP-PoC

CVE-2026-36981-Kernel-EoP-PoC Kernel write-what-where condition within the pwdrvio.sys kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation. 2026-02-09 Vendor notified 2026-03-05 Vendor acknowledged 2026-03-...

pkexec-lpe-poc

pkexec-lpe-poc POC for CVE-2021-4034 Original Writeup For ease of use, it accepts a C file payload instead of a hardcoded shell. usage: root@kitploit: make ./poc payload.c tested on Ubuntu 20.04.3 LTS - Linux target 5.4.0-81-generic...

CVE-2021-4034

CVE-2021-4034 A simple proof-of-concept for CVE-2021-4034 pkexec local privilege escalation. Based on the excellent summary by our friends at Qualsys. How do? 1. Clone this repository onto a machine with a vulnerable version of pkexec. 2. ./run.sh 3. Shenanigans...

CVE-2021-29441

CVE-2021-29441 Usage: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...

Compiled-PoC-Binary-For-CVE-2023-28252

CVE-2023-28252 的预编译 PoC 二进制文件 该仓库包含一个预编译的二进制文件，可在易受 CVE-2023-28252 影响的 Windows 机器上运行 该预编译二进制文件是 fortra 仓库 中 PoC 漏洞利用代码的略微修改版本。 该文件可通过以下参数运行： root@kitploit: clfseop.exe 可以是您希望以 nt system\authority 权限运行的任何载荷，前提是漏洞利用成功执行 的默认值为 1208 ，如需了解如何找到正确的偏移量，请参阅 fortra 仓库 的默认值为 1 ，如需了解如何找到正确的标志，请参阅 fortra 仓库...

CVE-2021-4034-POC

CVE-2021-4034-POC POC for pwnkit vulnerability discovered by Qualys. Compile & execute: root@kitploit: gcc lpe.c -o lpe; ./lpe Creates the following directory/file structure: root@kitploit: /tmp ├── GCONVPATH=. │ └── test ├── payload.c ├── payload.so ├── test │ └── gconv-modules References...

CVE-2026-41651

CVE-2026-41651 — PackageKit TOCTOU Local Privilege Escalation Classification: Purple Team Assessment Artifact Authorized use only. This document and the accompanying test script are intended solely for internal security validation on systems where written authorization has been obtained. Proof of...

CVE-2021-4034

CVE-2021-4034 Este es un exploit creado para CVE-2021-4034 como POC. Está basado en la información de https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt. Cómo usarlo: Descarga la carpeta del exploit. Compila prog.c con gcc prog.c Ve a la carpeta GCONVPATH=. y asegúrate de que el archivo...