CopyFail-CVE-2026-31431

CopyFail: CVE-2026-31431 Python implementation of copy.fail. Overwrites the page cache of a setuid-root binary via AFALG + splice to get root. No race, no offsets works on any Linux distro since 2017. Requirements Python 3.6+ 3.12+ uses os.splice natively; older versions fall back to ctypes Linux...

CVE-2017-16995-Linux-Kernel---BPF-Sign-Extension-Local-Privilege-Escalation-

This repository does not have a README...

Reconky-Automated_Bash_Script

Reconky-Automated Bash Script \ \ /|| \ /|\ /| | || /| /| || \ || \ / / \ / | || | | | | | || \ | || / / \ / | | | | | | | || \ \ || \ / | \ | | | | | | || | \ || \ \ | \ | /| /| || \ || / \ \ | | |/ ///|/ |/ / / Usage ./reconky.sh About Reconky is a script written in bash to automate the...

airgeddon

airgeddon This is a multi-use bash script for Linux systems to audit wireless networks. All the needed info about how to "install | use | enjoy" airgeddon is present at GitHub's Wiki. I. Content & Features Home Features Screenshots Wallpapers II. Requirements Requirements Compatibility Cards and...

TriforceLinuxSyscallFuzzer

TriforceLinuxSyscallFuzzer 20160613 https://github.com/nccgroup/TriforceLinuxSyscallFuzzer Jesse Hertz [email protected] Tim Newsham [email protected] New: For those looking to play with TriforceAFL and TLSF, Richard Johnson created a Dockerfile which installs both and even builds a Lin...

CVE-2026-43284-CVE-2026-43500-scan

DirtyFrag Scanner & Patcher Internal Network Tool for CVE-2026-43284 & CVE-2026-43500 Automated Linux LPE Audit & Mitigation via SSH Disclaimer : This tool is specifically designed for legitimate internal security audits. Using it without authorization against systems that are not yours is a...

ExploitGSM

ExploitGSM Exploit for 6.4 - 6.5 kernels and another exploit for 5.15 - 6.5 Telegram for contact - https://t.me/YuriiCrimson Telegram chat - https://t.me/itcrowdua In winter I found two vulnerabilities in the ngsm driver. After that Jammes wrote to me offering to buy them from me. As you...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

Linux-Kernel-Copy-Fail-CVE-2026-31431-

Copy Fail CVE-2026-31431 Vulnerability Analysis and Response Practice This project analyzes the operational principle of the Linux Kernel Copy Fail CVE-2026-31431 vulnerability and compares the pre-patch and post-patch state using the non-destructive checker from the public PoC repository. It doe...

TowelRoot

What is TowelRoot? Towelroot gains root access by exploiting a vulnerability in the kernel of Android, which is based on Linux and is a very basic component of the device that basically acts as a middle-man to make the operating system and the physical hardware talk to one another...

CVE-2026-31431---Copy-Fail-PoC

Description This repository contains an analysis of CVE-2026-31431 Copy Fail in the Linux kernel. It targets local privilege escalation LPE through page cache manipulation. Legal Notice This project is for educational and testing purposes only. Any unauthorized use is the sole responsibility of t...

CVE-2025-39965

DISCLAIMER All content provided is for educational and research purposes only. All testing was conducted exclusively on an Linux Kernel Emulator, in a safe, isolated environment. No production systems or devices owned by others were involved or affected during this research. The author assumes no...

Blue-Borne

Blue-Borne BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability CVE-2017-0781, and the SDP Information leak vulnerability CVE-2017-0785 can be found. Under 'linux-bluez'...

rover

rover Proof of Concept code for CVE-2016-5696 Rover is a small python program to discover abitrary client source ports as shown in CVE-2016-569. Once the source port is known, the 4 tuple of information needed to confirm that two host are communicating can be completed. When run, rover establishe...

android-pentest-tool

Android pentest tool designed for kali linux javaFX + Spring boot + bash scripts make all routine steps in one click Update Version 1.0 released! Build mvn clean package Run java -jar target/android-pentest-tool.jar TODO: add installation steps add features list more screenshots bug fixing add...

LazyPorts

LazyPorts Visual port manager for Linux lazyports is a terminal UI tool to visualize and manage network ports. It provides an interactive table to inspect listening processes and kill them easily. Built with Bubble Tea and Lipgloss. Prerequisites Go 1.24 or higher required for installation...

CVE-2026-24061

CVE-2026-24061 CVE-2026-24061 Telnet RCE Exploit For Linux MacOS Windows CVE-2026-24061 Telnet RCE 1.9.3 = GNU Inetutils = 2.7 Usage: go-telnet-exploit -p Check Exploit...

CVE-2014-6271

Shellshock Exploitation CVE-2014-6271 Shellshock is effectively a Remote Command Execution vulnerability in BASH. This script exploits the vulnerability in the web environment on apache or similar with modcgi enabled. The vulnerability lies in the manipulation of environment variables, which are...

CVE-2022-0847

CVE-2022-0847 Vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. To compile: gcc poc.c -o poc Usage: ./poc TARGETFILE OFFSET DATA Author and...

Copy_Fail_CVE-2026-31431_test_and_fix

Usage python3 testCVE-2026-31431.py Fix for Almalinux 9 / 10 until kernel update arrive sudo grubby --update-kernel ALL --args="initcallblacklist=algifaeadinit" sudo reboot Fix for Debian / Ubuntu until kernel update arrive as root echo "install algifaead /bin/false"...