496236 matches found
copyfail-guard
CopyFail Guard root@kitploit: / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / / // // / // / // / / / // / / / / // / // / // / / / // / // ./, // ,/// /,/,// ,/ // // 快速、可审计的 Linux 暴露评估与缓解工具,用于 CVE-2026-31431 “Copy Fail”,在内核修补完成前提供防护。 CopyFail Guard 是一款面向 Linux...
iBSSloader
iBSSloader 研究和工具,用于通过 checkm8、修补后的 iBSS/iBEC 以及自定义裸机载荷,在 iPad mini 1(P105AP / iPad2,5,Apple A5) 上启动 Linux —— 无需写入 iOS 安装。 本仓库整合了: 设备树移植 — Apple ADT → P105AP 的 Linux DTS/DTB 内核构建 — ARMv7 zImage + 平台补丁 iBSS/iBEC 链 — primepwn、autogo EOF 加载器、暂存捆绑包 裸机探测 — 帧缓冲、GPIO、PMGR、多点触控(Z2 SPI)、内存映射 Linux 启动路径 — A...
CVE-2022-27666
CVE-2022-27666 Linux 内核 IPsec ESP6 实现中的堆缓冲区溢出(linux 5.13.19)。 环境搭建(假设为 root 用户) 1. 构建内核(在虚拟机内) 安装依赖: root@kitploit: apt update && apt install -y \ build-essential bc bison flex \ libssl-dev libelf-dev libncurses-dev \ dwarves pahole gcc make wget xz-utils git python3 libfuse3-dev 下载并解压:...
kernel-exploit-dirtycow
Kernel Exploit — Dirty Cow CVE-2016-5195 Privilege escalation lab using the Dirty Cow vulnerability, carried out as part of the cybersecurity specialization at 4Geeks Academy. Description Dirty Cow is a race condition in the Linux kernel's memory subsystem CVE-2016-5195 that allows an unprivilege...
copyfail-alpine
This is a more minimal port of Copy Fail LPE CVE-2026-31431 which patches the first few bytes of /etc/passwd so that su-ing to root requires no password. This reduces the total size of the original exploit and makes it more portable. Distributions like Alpine use busybox/musl instead of a...
dirty_frag_mitigation
dirtyfragmitigation 1. A bash script for mitigating linux dirty frag exploit CVE-2026-43500 2. Works on all Debian/Ubuntu Arch based platforms i.e. Kali, ParrotSec, BlackArch 3. Added --check to run as non-root user. Added fragnesia support as it shares the same patch surface with dirtyfrag...
CVE-2026-86315
An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...
CyberMeowfia-ace3
网站: nebusec.ai · Twitter @nebusecurity · 漏洞列表 885+ IonStack 后续,关注 https://github.com/NebuSec/CyberMeowfia/issues/44 最新研究 IonStack 第二部分 :GhostLock,一个已在所有Linux发行版中存在15年的栈上UAF漏洞 Linux Kernel 📖 Writeup · 🐦 Twitter Longinus :一个漏洞中的两个边界,穿透Chrome的渲染器和V8沙箱,CVE-2026-6307 Chrome V8 📖 Writeup · 🐦 Twitter...
tap
The TrustedSec Attack Platform TAP TAP - 远程渗透测试平台构建器。 作者:David Kennedy @HackingDave 公司:TrustedSec https://www.trustedsec.com 项目页面:https://github.com/trustedsec/tap TrustedSec 项目 - 版权所有 2020 支持的操作系统:Linux(首选 Ubuntu Linux) 什么是 TAP? TAP 是一个远程渗透测试平台构建器。对于安全行业的人来说,出差常常成为一种负担,并给客户增加大量成本。TAP...
mcpjam-to-root
⚠️ 免责声明 本仓库仅用于授权的安全研究、渗透测试和教育目的 。 请勿在未经明确授权的系统上使用本文所述的技术。 ⚡ MCPJam → Root 从 MCPJam Inspector RCE 到 root — CVE-2026-23744、JupyterLab 令牌泄露、内核执行与 OPSMCP 权限提升。 --- 📖 概述 本仓库记录了一条完整的 Linux 攻击链,从暴露的 MCPJam Inspector 实例一直到 root 级访问权限 。 该攻击链串联了开发者工具、本地服务、凭据处理和应用授权方面的多个弱点: root@kitploit: MCPJam Inspector │...
CVE-2025-32462
CVE-2025-32462 – sudo POC Script This is a CVE‑2025‑32462 privilege escalation detection script, providing two modes: direct sudo detection and non-privileged user traversal detection. File Structure File| Description ---|--- poc.sh| Vulnerability verification file for CVE-2025-32462 supports bas...
cve_2026_frag_family_fix
ПО для устранения уязвимостей frag family / Mitigation tool for frag family vulnerability Copy Fail 2026 Dirty Frag 2026 Fragnesia 2026 DirtyClone 2026 PEdit-CoW 2026 Запустить исправление на любом Linux / Run any Linux hotfix root@kitploit: b="/tmp/cve2026fragfamilyfix"; wget -qO $b $wget -qO-...
CVE-2026-31431
CVE-2026-31431 — Copy Fail tracking site Source for the Copy Fail patch-status tracker: a single-page site recording which distributions have shipped a fix for the algifaead privilege escalation in the Linux kernel. Where the facts live Everything about the bug — CVE IDs, affected and fixed...
CVE-2026-80810
In the Linux kernel, the following vulnerability has been resolved: i...
CVE-2026-80848
In the Linux kernel, the following vulnerability has been resolved: x...
Linux Distros Unpatched Vulnerability : CVE-2026-80896
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mshv: Fix race in mshvirqfddeassign mshvirqfddeactivate and the hlist traversal of ptirqfdslist require pt-ptirqfdslock to be held, but mshvirqfddeassign omits...
CVE-2026-80815
In the Linux kernel, the following vulnerability has been resolved: A...
UBUNTU-CVE-2026-80849
In the Linux kernel, the following vulnerability has been resolved: n...