cnext-exploits

CNEXT exploits Exploits for CNEXT CVE-2024-2961, a buffer overflow in the glibc's iconv, by @cfreal Usage $ git clone --recurse-submodules https://github.com/ambionics/cnext-exploits.git $ pip install -r requirements.txt Technical analysis The vulnerability and exploits are described in the...

CVE-2023-4911

glibc Heap Buffer Overflow Vulnerability CVE-2023-4911 Item| Description ---|--- CVE ID| CVE-2023-4911 Attack Type| Heap Buffer Overflow → Local Privilege Escalation CVSS 3.1| 7.8 High Disclosure Date| 2023-10-03 Vulnerability Point| glibc dynamic loader ld.so GLIBCTUNABLES parser Affected...

CVE-2015-7547-Research

Initial work on glibc exploit CVE-2015-7547. Currently just returns to libc and calls system to provide a shell. This version does not account for ASLR yet...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

cve-2024-6387_AImade

Presentation of the Test Code for CVE-2024-6387 Introduction This document presents a Python script designed to test the vulnerability CVE-2024-6387, identified in OpenSSH. This vulnerability is a race condition in the SIGALRM signal handler that can allow remote code execution RCE on glibc-based...

house_of_apple_2

Exploring House of Apple 2 on modern glibc This repository is a self-contained playground inspired by pwn.college's File Struct Exploitation module. It does not introduce a new variation of House of Apple 2, it just answers my curiosity about how the technique holds up on recent versions of glibc...

rex-sec-glibc

rex-ossec-base setup Will update the glibc files as are required. check Will check the glibc packages as they stand. task "setup", make Rex::Collectd::Base::setup; ;...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

ghosttester

Testing Script for the Glibc GHOST Vulnerability CVE-2015-0235 A little script I found to test the Glibc GHOST Vulnerability CVE-2015-0235. The usage is quite simple. Just clone or download the script to your server/desktop and start it like this: Debian/Ubuntu gcc ghosttest.c -o ghosttest or:...

Glibc-Vulnerability-Exploit-CVE-2015-7547

Glibc-Vulnerability-Exploit-CVE-2015-7547 Glibc-Vulnerability-Exploit-CVE-2015-7547...

yellow

| | | | | | |/ \ | |/ \ \ /\ / / | || | / | | \ V V / , ||||/ // |/ - Just add blue. yellow - just add blue Simple binary modifications that will trigger a canarytoken when a binary is executed. Ideal for boobytrapping production systems against attackers. Currently there are four methods:...

CVE-2024-6387-Updated-x64bit

CVE-2024-6387-Updated-x64bit Private x64 RCE exploit Python for CVE-2024-6387 02.07.2024 from exploit.in The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output. 🔥...

cfengine-CVE_2015_0235

CVE20150235 gethostbyname buffer overflow exploit in glibc - CVE-2015-0235 https://community.qualys.com/blogs/laws-of-vulnerabilities/2015/01/27/the-ghost-vulnerability Originally Sourced from Ben Bomgardners post to the help-cfengine mailing list...

Exploit for CVE-2026-96889

CVE-2026-96889 — Image Optimization SVG → librsvg use-after-fr...

cve-2015-7547-public

PoC attack server for CVE-2015-7547 vulnerability in glibc DNS stub resolver To test on local machine with a vulnerable glibc version: user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee /etc/resolv.conf user@localhost:/$ echo 'nameserver 127.0.0.127' | sudo tee -a /etc/resolv.conf...

cookbook-update-glibc

cookbook-update-glibc Overview cookbook for update glibc. CVE-2015-0235GHOST Japan http://www.walbrix.com/jp/blog/2015-01-ghost.html English http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-0235 Description update glibc by Chef Solo. Attention. this cookbook need to reboot. Platform is...

CVE-2023-4911

CVE-2023-4911-Looney-Tunables Looney Tunables Local privilege escalation CVE-2023-4911 workshop for educational purposes only Links: IPPSEC video Qualsys Blog Post Qualsys Tech Details Exploit POC python script GLIBC sources GLIBC tunables documentation Description What is ld.so? In computing, a...

libptmalloc

libptmalloc libptmalloc is a python library to examine ptmalloc the glibc userland heap implementation. It is currently designed for use with GDB but could easily be adapted to work with other debuggers. Installation Please refer to the Install Guide. Usage Please refer to the User Guide. Support...

CVE-2026-0915-json-Patch.-V2.0

CVE-2026-0915-json-Patch.-V2.0 Patch the Bug - glibc 🔒 JSON Validator Security Patch Enterprise-grade solution for CVE-2026-0915 - Protects against insecure JSON parsing through strict schema validation. 🚨 Security Notice This patch fixes CVE-2026-0915 - a critical vulnerability in JSON parsing...

CTT-Vsyslog-Vortex-CVE-2023-6246

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsysloginternal heap buffer overflow exploitation using Convergent Time Theory α = 0.0302011. 33-layer temporal heap spray + phase-locked trigger for reliable local privilege escalation. README.md CTT-Vsyslog-Vortex Temporal Resonance Exploit f...