CVE-2022-29582-Exploit

CVE-2022-29582 This repository contains exploit code for CVE-2022-29582, a Local Privilege Escalation in iouring of the Linux kernel. Default configurations are affected and no special privileges should be needed. You can find the writeup at...

CVE-2024-0582-dataonly

CVE-2024-0582 A data-only attack based on CVE-2024-0582 Description The exploit follows the strategy in this blog post, except that I didn't use a child process to open files. I found some exploits on GitHub follows the strategy in this write-up. After I reproduced the exploit with socket-based...

Concryptor

Concryptor A multi-threaded AEAD encryption engine built in Rust. Encrypts and decrypts files at gigabyte-per-second throughput using a triple-buffered iouring pipeline, parallel chunk processing via Rayon, and assembly-optimized ciphers via ring. ⚠️ DISCLAIMER: EXPERIMENTAL SOFTWARE ⚠️ This...

CVE-2022-2602-Kernel-Exploit

CVE-2022-2602-Kernel-Exploit Details https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR The vulnerability is an Use-After-Free that impacts the registered file descriptor functionality in the iouring subsystem. It's...

RingReaper

RingReaper RingReaper is a simple post-exploitation agent for Linux designed for those who need to operate stealthily, minimizing the chances of being detected by EDR solutions. The idea behind this project was to leverage iouring , the new asynchronous I/O interface in the Linux kernel,...

bad_io_uring

Bad IOuring https://www.blackhat.com/us-23/briefings/schedule/index.htmlbad-iouring-a-new-era-of-rooting-for-android-32243 Build the exploit Make sure the Android NDK is installed. For pixel 6, make pixel For samsung s22, make s22 How to use the exploit The exploit is written to support different...

Furtex

Furtex Post-exploitation and evasion research toolkit for Linux, built around iouring and eBPF. No liburing, no frameworks, raw syscalls throughout. More tools soon. PRs are welcome. 🇧🇷 Join in Rootkit Researchers https://discord.gg/66N5ZQppU7 For authorized research and red team engagements only...

Exploit for Missing Release of Memory after Effective Lifetime in Linux Linux_Kernel

VsockDrop-Adapted An adapted version of MaherAzzouzi's Vsock...

CVE-2024-0582

Introduction This exploit implements a Dirty Cred attack method to gain unauthorized write access to /etc/passwd. Unlike many similar exploits that create numerous pages or aggressively spray file descriptors, this approach takes a more targeted route to corrupt the necessary kernel structures...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...

CVE-2022-29968

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 uninitialized memory in the Linux Kernel, specifically the iouring system. The crash was found with Syzkaller. The crash was analyzed by Joseph Ravichandran and Michael Wang. The exploit was written by Joseph Ravichandran. We found &...

CVE-2026-31431-detection-defense

CVE-2026-31431: Detection & Defense Against iouring Bypass of Existing Detection Authors : fz0x00, qiwuSEC Research For CVE-2026-31431 "Copy Fail", we demonstrated systematic weaknesses in mainstream security products by combining three bypass strategies: iouring async I/O path , process splittin...

Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

This exploit for CVE-2026-24102 represents the pinnacle of the SimoesCTT series. By targeting iouring—the Linux kernel's most advanced asynchronous interface—you are attacking the very concept of "Sequential Logic." In iouring, system calls are not executed; they flow. We will exploit the Tempora...

CVE-2026-53365

CVE-2026-53365 — VsockDrop:iouring + AFVSOCK Zero-Copy Reference Count Underflow, Page-Cache Overwrite Privilege Escalation HackSpeak distribution mirror. This repository is a distribution mirror of MaherAzzouzi/vsockdrop , with code identical to upstream; upstream does not include a LICENSE, so...

PinTheft-go

pintheft-go Go port of pintheft - RDS zcopy double-free LPE. Member of the Dirty Frag vulnerability class. !IMPORTANT Arch Linux is one of the most exposed distributions for this vulnerability, as it is among the few where the RDS module can typically be loaded by default. How it works tl;dr The...

io_uring_LPE-CVE-2024-0582

iouringLPE-CVE-2024-0582 LPE exploit for CVE-2024-0582. I will not be releasing a write-up for this vulnerability as my method of exploitation is almost the same as for CVE-2023-2598. You can read the exploitation section of my write-up on CVE-2023-2598 to understand this exploit as well:...

io_uring_LPE-CVE-2023-2598

iouringLPE-CVE-2023-2598 LPE exploit for CVE-2023-2598. My write-up of the vulnerability: Conquering the memory through iouring - Analysis of CVE-2023-2598 You can compile the exploit with gcc exploit.c -luring -o exploit Disclaimer For educational and research purposes only. Use at your own risk...

io_uring_scanner

iouring scanner iouring based network scanner written in Rust. See Building a iouring based network scanner in Rust. Supports 3 scan modes: TCP connect SSH version match regular expression matching HTTP header match regular expression matching on reponse header Build from source You need a Rust...

CVE-2023-2598

CVE-2023-2598 what's iouring? ​ iouring is a system call interface for Linux. It has supported almost all system call so far, not only read and write initially. It enables an application to initiate system calls that can be performed asynchronously. Submission and Completion Queues At the core of...