602948 matches found
CVE-2022-25636
CVE-2022-25636 netfilter Kernel Privilege Escalation toc Vulnerability Overview Vulnerability ID: CVE-2022-25636 Product: linux kernel - netfilter Affected versions: linux kernel 5.4 Impact: Heap out-of-bounds write in the netfilter kernel module, can lead to privilege escalation when SYSADMIN is...
scutum
SCUTUM Firewall Introduction In short, SCUTUM configures your personal computer automatically against malicious TCP/UDP traffic and ARP spoofing attacks. This software uses UFW to setup conventional firewall for you, determines and locks the gateway MAC address so you won't get ARP-spoofed. This...
copyfail-deconstructed
copyfail-deconstructed Easy-to-understand version of CVE-2026-31431, a privilege escalation technique that allows anybody to become root. The original proof-of-concept is found here: https://github.com/theori-io/copy-fail-CVE-2026-31431, but is heavily compressed and minified so it can have as...
shlol
SHLOL This is a menu you can trigger with a keybind to do basic stuff for you Really easy to use Create listeners on the fly No copy pasting needed Choose the type, IP and PORT and you are done! Run remote scripts easily Reverse Shell Generator...
php-bypass-disable-functions
php-bypass-disable-functions Demo project how to bypass the disablefunctions security control of PHP on Linux, where processes can inspect and even write their own memory via the special /proc/self/map file via standard file operations open/seek/read/write. Tested on PHP 7.3.5, x8664 Linux See...
CVE-2022-1011
CVE-2022-1011 Fix link: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0c4bcfdecb1ac0967619ee7ff44871d93c08c909 This vulnerability is mainly due to the asynchronous nature of splice, which allows the user-mode filesystem process server side to retain a piece of memor...
CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free
CVE-2026-22009 โ Linux eBPF Map Locking Race โ UseโAfterโFree Program Code C simulation // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if !mapfreed char...
check-cve-2026-23111
CVE-2026-23111 Defensive Validation Script Overview CVE-2026-23111 is a Linux kernel vulnerability in nftables that can be exploited for local privilege escalation by an unprivileged user on systems where user namespaces and nftables are available.12 Public vendor and government advisories descri...
Mandating-Honeypots-Project
Mandating-Honeypots-Project As laws like the Parents Decide Act H.R.8250 and California's Digital Age Assurance Act Assembly Bill 1043 move through legislative bodies, privacy, anonymity, and data security becomes laden with systemic threats and new security architecture with unexamined attack...
Zydra
Zydra Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the userโs password in the linux shadow file one after...
uaf-exploit-cve-2026-23415
CVE-2026-23415 PoC Proof of concept for CVE-2026-23415 , a use-after-free vulnerability in the Linux kernel futex subsystem. About the vulnerability A race condition exists between futexkeytonodeopt and vmareplacepolicy. While the futex code reads a virtual memory area's NUMA memory policy, anoth...
copyfail-guard
copyfail-guard Automated detection and mitigation tool for the vulnerability CVE-2026-31431 "Copy Fail", a local privilege escalation LPE in the algifaead module AFALG interface of the Linux kernel. โ ๏ธ Scope: this project is purely defensive. It does not contain, generate, or reference exploit...
cve-2021-33909
Kernel runtime fix of CVE-2021-33909 This repository builds an out-of-tree module named "cve-2021-33909.ko". cve-2021-33909 fixes an issue in the kernels filesystem layer by kprobe-replacing vulnerable functions during runtime. It can be build via "make", setting KDIR to the kernels...
weevely3
Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...
threatbox
Threatbox - Standard Attack Platform ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of scripts, lived as a rolling virtual machine, existed as code to build a Linux ISO, and has now been converted to a set of...
Dirty-Pipe-Oneshot
Dirty-Pipe-Oneshot Compiled version of CVE-2022-0847 aka Dirty Pipe. Just one shot to root them all :D just comple the cve-2022-0847.c file gcc cve-2022-0847.c -o getroot then execute it on the victim & get root :D ./getroot /etc/passwd 1 ootz: Happy Rooting ๐ญ...
shellcodetester
Shellcode Tester ShellcodeTester officially supports Python 3.8+. Main features Assembly ASM file 32 and 64 bits Assembly ASM file to Windows, Linux and MacOS Check badchars Output to several formats NASM Shell Other amazing features... Shellcode Tester - Getting stats shellcodetester -asm file.a...
CVE-2022-3910
CVE-2022-3910 1. dirtycred exp: t1dpoc README.md: CVE-2022-3910 and DirtyCred: Analysis of Linux Privilege Escalation Vulnerability 2. cross-cache exp: t1dexp README.md: CVE-2022-3910 Analysis-2...
CVE-2026-46300_Fragnesia
๐งจ Fragnesia โ CVE-2026-46300 Linux Kernel LPE Audit & Exploit Toolkit ยท Page-Cache / XFRM ESP-in-TCP espintcp Regression Interactive audit โ LPE prerequisite detection โ Automated exploit execution after confirmation โ ๏ธ Ethical & Legal Warning This tool is intended solely for legitimate and...