copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - AFALG AEAD Splice UAF PoC Multi-language implementation and compatibility with older versions of Python. C exploit.c gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Tested on Ubuntu 20.04: Python exploit-python3-8-10.py Compatible with Python 3.8.10 an...

Linux_Exploit_Suggester

LinuxExploitSuggester Linux Exploit Suggester; based on operating system release number. This program run without arguments will perform a 'uname -r' to grab the Linux Operating Systems release version, and return a suggestive list of possible exploits. Nothing fancy, so a patched/back-ported pat...

Exploitivator

Exploitivator V2.0 - modified to use Python 3 Prerequisites This has only been tested on Kali. It depends on the pymetasploit3 module for Python, described in detail here: https://coalfire.com/the-coalfire-blog/pymetasploit3-metasploit-automation-library Install the necessary Kali packages and th...

fi6s

fi6s: Fast IPv6 scanner fi6s is an IPv6 port scanner designed to be fast, aimed at Internet scanning and discovery. This is achieved by sending and processing raw packets asynchronously. The design and goal is pretty similar to Masscan, though it is not as full-featured. Please take note of the...

logira

logira OS-level runtime auditing for unpredictable automation. logira is an observe-only Linux CLI that records runtime exec, file, and net events via eBPF. It helps you see what actually happened during AI agent runs and other forms of automation, with per-run local storage for auditing, post-ru...

CVE-2026-32707-PX4-Autopilot-tattu_can-Stack-Buffer-Overflow-DoS-

-orange CVE-2026-32707 - PX4-Autopilot tattucan Stack Buffer Overflow DoS ╔════════════════════════════════════════════════════════════════════════════════════════════╗ ║ ║ ║ ██████╗ █████╗ ███╗ ██╗██╗ ██╗ █████╗ ███╗ ███╗███████╗██████╗ ║ ║ ██╔══██╗██╔══██╗████╗ ██║╚██╗ ██╔╝██╔══██╗████╗...

alter-zero

Alter Zero Give your terminal a coding agent. Read, build, debug, and review code with an agent that works alongside you. Use the same tools for cybersecurity research, technical investigation, and everyday automation. Quick start · Features · Model providers · Commands & shortcuts · Support ·...

trevorc2

trevorc2 TrevorC2 - Command and Control via Legitimate Behavior over HTTP Written by: Dave Kennedy @HackingDave Website: https://www.trustedsec.com Note that this is a very early release - heavy randomization and encryption to be added soon. TrevorC2 is a client/server model for masking command a...

dr_checker

DR.CHECKER : A Soundy Vulnerability Detection Tool for Linux Kernel Drivers This repo contains all the sources, including setup scripts. Now with an Amazing UI to view the warnings along with corresponding source files. Tested on Ubuntu = 14.04.5 LTS Announcements 16 Feb 2018 : DR.CHECKER has bee...

CVE-2023-2002

Linux Bluetooth: Unauthorized management command execution CVE-2023-2002 An insufficient permission check has been found in the Bluetooth subsystem of the Linux kernel when handling ioctl system calls of HCI sockets. This causes tasks without the proper CAPNETADMIN capability can easily mark HCI...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

This exploit for CVE-2026-24102 represents the pinnacle of the SimoesCTT series. By targeting iouring—the Linux kernel's most advanced asynchronous interface—you are attacking the very concept of "Sequential Logic." In iouring, system calls are not executed; they flow. We will exploit the Tempora...

MitigationToolkit-ROSN-LR5-Full

🧬 ROSN-LR5 – Kernel LPE PoC & Mitigation Toolkit CVE-2026-31431 Offensive and defensive tool for the CVE-2026-31431 vulnerability on Linux systems. It combines a local privilege escalation LPE proof of concept with utilities to review and temporarily mitigate the AFALG-based attack vector. ⚖️...

CVE-2024-32002-linux-submod

This repository does not have a README...

CVE-2021-4034-Linux

CVE-2021-4034 PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec CVE-2021-4034 https://seclists.org/oss-sec/2022/q1/80...

CVE-2025-32463

CVE-2025-32463 🚨 Privilege escalation to root usingsudo chroot. No need for gcc installed. 🚀 What is CVE-2025-32463? CVE-2025-32463 is a Linux vulnerability that allows a local attacker to escalate privileges to root by abusing the sudo chroot command. Unlike similar exploits, this technique does...

snoop

snoop A syscall tracer for Linux, built on eBPF. Like strace but with a live TUI, smart filters, and argument decoding you can actually read. $ sudo snoop curl https://example.com 0.001 curl1234/1234 openatATFDCWD, "/etc/ssl/certs/ca-certificates.crt", ORDONLY = 4 0.002 curl1234/1234 read4,...

ebpfmon

ebpfmon ebpfmon is a tool for monitoring eBPF programs. It is designed to be used with bpftool from the linux kernel. ebpfmon is a TUI terminal UI application written in Go that allows you to do real-time monitoring of eBPF programs. Installation eBPFmon can be built from source or there is a...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

Z-Jail

Z-Jail Multi-layer sandbox for native code execution on Linux. Seven ordered isolation layers — no external dependencies, 81 KiB PIE binary. ┌──────────────────────────────────────────────────────┐ │ Z-Jail │ ├──────────────────────────────────────────────────────┤ │ rlimits CPU, AS, NOFILE, NPRO...

hbp-attack-demo

fork from https://github.com/veritas501/hbpattackdemo hbpattack demo Reference: P0 blog: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html Created a vuln module, pretending we have a kernel arbitrary address write primitive, but KASLR is...