CVE-2022-23222

CVE-2022-23222 Chinese writeup: https://tr3e.ee/posts/cve-2022-23222-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run $ make cc -I include -static -w -o exploit exploit.c $ ./exploit phase1/8 'create bpf maps' running + phase1/8 'create bpf maps'...

BestEdrOfTheMarket

Best EDR Of The Market BEOTM V3 🐲🏴‍☠️ Best Edr Of The Market is an open-source lab designed to implement and understand, from a low-level perspective, the detection methods used by Endpoints Detection & Response security products and their workarounds. These techniques are mainly based on the...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

kernel: ipv4: validate checksum_start before completing checksum

A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during...

CVE-2023-0179-PoC

Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

FakeMBR

FakeMBR TDL4 style rootkit to spoof read/write requests to master boot record Needs to be compile with NTDDK. See: http://www.malwaretech.com/2015/01/using-kernel-rootkits-to-conceal.html...

CVE-2026-31431

CVE-2026-31431 - Copy Fail PoC Educational Proof of Concept for CVE-2026-31431 , also known as Copy Fail , a Linux kernel local privilege escalation vulnerability involving the AFALG / algifaead cryptographic interface. !WARNING This repository is provided strictly for educational, defensive, and...

bad-epoll

Bad Epoll: The bug missed by Mythos An unprivileged process escalating to root on Google kernelCTF. Bad Epoll CVE-2026-46242 is a race-condition use-after-free in the Linux kernel's epoll subsystem. This bug lets an unprivileged process become root, not only on Linux desktops and servers but also...

Platbox

Platbox UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW t...

EUVD-2026-66564

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

copyfail-dfir

CVE-2026-31431 Copy Fail: DFIR Investigation Walkthrough An interactive, step-by-step forensic investigation walkthrough for the Copy Fail Linux kernel vulnerability CVE-2026-31431. Click through an incident response scenario, from SIEM alert to confirmed verdict, with the commands an analyst wou...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel Exploit Summary In this project you will find a full implementation of the second "bpf" kernel exploit for the PlayStation 4 on 5.05. It will allow you to run arbitrary code as kernel, to allow jailbreaking and kernel-level modifications to the system. This exploit also contains...

Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.100 fixes various security issues: The following security issues were fixed: CVE-2026-53131: netfilter: require Ethernet MAC header before using ethhdr bsc1269775. CVE-2026-63794: KVM: SVM: Fix page overflow in sevdbgcrypt for ENCRY...

GhostShell

GhostShell CVE-2026-31431 — Local Privilege Escalation via Linux Kernel Page Cache Corruption GhostShell is a local privilege escalation tool that exploits a flaw in the Linux kernel's authencesn AEAD crypto implementation to obtain a root shell from an unprivileged user account. It corrupts the...

HugeDirtyCowPOC

"Huge Dirty Cow" POC A POC for the Huge Dirty Cow vulnerability CVE-2017-1000405. Full details can be found here. Before running, make sure to set transparent huge pages to "always": echo always | sudo tee /sys/kernel/mm/transparenthugepage/enabled...

Windows-2

Windows-2 BlueKeep Vulnerable Lab - CVE-2019-0708 1. Overview This repository contains a deliberately vulnerable Windows lab designed to demonstrate the BlueKeep vulnerability affecting the Remote Desktop Protocol RDP service. BlueKeep is a critical pre-authentication Remote Code Execution RCE...

CVE-2026-98709

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. During channel context switching operations across multiple virtual interfaces, improper tracking of link reservations can cause an active channel context to be released prematurely while still in use by the driver. A...

CVE-2026-98670

A flaw was found in the Linux kernel's Xilinx XADC driver. During device unbinding, an improper cleanup order allows interrupt requests IRQs to remain active after delayed work has been cancelled. A local user capable of detaching the device can cause an interrupt to schedule work that executes...

CVE-2026-98734

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker could exploit this flaw to cause a Denial of Service DoS via a system crash or potentially escalate privileges. The vulnerability occurs due to improper synchronization between packet transmission scheduling and connecti...