remediate_cesa_2019_2091

cesa20192091 This module contains a Bolt Task that will remediate CVEs described in CESA-2019:2091 and parallel issues present on other Enterprise Linux 7 EL7 platforms. Table of Contents 1. Description 2. Setup - The basics of getting started with cesa20192091 Beginning with cesa20192091 3. Usag...

linux-4.19.72_CVE-2020-27815

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

CVE-2012-1495-Webcalendar-

CVE-2012-1495-Webcalendar- Prerequisites : Kali Linux or Parrot OS machine 1- Clone the repository 2- Extract the archive "webcalendar" 3- Create the Docker container and launch it using the commands: docker build -t webcalendar . docker run -d -p 80:80 webcalendar 4- On your Kali machine, launch...

SG-2026-0024

Dirty Frag primitive-only PoC Readable N4C demonstrator for CVE-2026-43284 XFRM/ESP and CVE-2026-43500 RxRPC/RXKAD. The PoC answers one question: can an unprivileged process change the page cache of a root-owned, read-only file through a sharedskbuff fragment? It does not overwrite /usr/bin/su or...

quipu

Quipu A desktop workbench for writing, validating, compiling, and testing YARA rules. Quipu pronounced “KEE-poo” brings a project explorer, a YARA-aware editor, the YARA-X compiler, and focused scan results into one local application. It embeds both YARA-X and its language server, so you do not...

CVE-2025-32463

CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...

cve-2026-31431

CVE-2026-31431 — Linux Kernel algifaead "Copy Fail": Analysis Security research on CVE-2026-31431 CVSS 3.1 7.8 HIGH , AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H: three composable design flaws in the AFALG AEAD interface chain into a deterministic, race-free 4-byte page-cache write at any offset of any...

linux-4.19.72_CVE-2023-35828

Linux kernel There are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. Please read Documentation/admin-guide/README.rst first. In order to build the documentation, use make htmldocs or make pdfdocs. The formatted documentatio...

dirtycow-lab

dirtycow-lab Dirty COW vulnerability exploitation CVE-2016-5195 on Ubuntu 16.04.1. cat README.md :/. 4. Execution and escalation : chmod +x /dirty && /dirty → su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt → 4GEEKSY0uG0tR00t. ✅ Result root@ubuntu:/home/student whoami root...

linux-4.1.15_CVE-2023-4128

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

yara-rules

yara-rules Collection of YARA signatures from recent malware research Ruleset Dacls Trojan Rule: DaclsLinux.yara Rule: DaclsWindows.yara Reference: https://blog.netlab.360.com/dacls-the-dual-platform-rat/ APT32 KerrDown Rule: APT32KerrDown.yara Reference:...

CVE-2020-8250

CVE-2020-8250: Privilege Escalation via Command Injection in Pulse Secure VPN Linux Client The root SUID executable pulsesvc, has a function “doupload” that unsafely passes the “HOME” environmental variable to “system”. By altering the “HOME” variable to contain special shell characters Ex: “” or...

loot-me

linux-loot Post Exploit Report Generation. Grabs files / commands and puts them in markdown ready for reporting and assists in finding sensitive information...

CVE-2022-0847-L-nux-PrivEsc

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. - create by antx at 2022-03-08. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later...

Linux-Kernel-Exploit-LAB

Linux-Kernel-Exploit Dirty COW CVE-2016-5195...

CVE-2017-4490-

CVE-2017-4490 I've done some experiments I have succeeded in Exploit file .basgrc Specialist on Writing and decorating on Terminal I have created Weakness in file .bashrc And succeeded in Impede Terminal The weakness exists with me Works on all systems Linux Because figlet Works on all systems Ju...

CVE-2019-13272

CVE-2019-13272 - Pkexec Local Privilege Escalation ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author BCOLES Description In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the...

MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...

linux-explorer

This project is no longer maintained! Linux Expl0rer Easy-to-use live forensics toolbox for Linux endpoints written in Python & Flask. Capabilities ps View full process list Inspect process memory map & fetch memory strings easly Dump process memory in one click Automatically search hash in publi...

Heartexploit

Heartexploit Here is my new first exploit, this exploit attacks the HeartBleed vulnerability CVE-2014-0160, I hope you like it. This exploit only works on linux since part of it is made in languages not compatible with windows. The only command needed to start this application is: ./Heartexploit....