Intel-Linux-Processor-Microcode-Data-Files

Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...

kasld

KASLD recovers the Linux kernel's virtual and physical memory layout — primarily the kernel text base — from a local process. What it can recover is a function of that process's vantage: its privileges and capabilities, the system's configuration, and any container confinement. It recovers the ba...

KernelPatch

KernelPatch Patching and hooking the Linux kernel with only stripped Linux kernel image. | |/ / | | \ | | | | | ' // \ '| ' \ / \ | | / | / | ' \ | . \ / | | | | | / | / | | || | | | | ||\|| || ||||| ,|\|| || Obtain all symbol information without source code and symbol information. Inject...

CVE-2026-31431

AFALG su memory‑patch exploit research A compact Python script that exploits an AFALG‑related kernel vulnerability to patch the su binary in memory and escalate privileges. This is provided for educational and research purposes only. ⚠️ Do not use this on any system you do not own or without...

DirtyClone

DirtyClone CVE-2026-43503 - Python PoC Non-official Python port of DirtyClone — a Linux kernel local privilege escalation vulnerability. This repository contains a working Proof of Concept that allows an unprivileged local user to gain root privileges by exploiting page-cache corruption via clone...

modrosnlr5

🧬 modrosnlr5 – Linux Kernel LPE PoC CVE-2026-31431 Proof-of-concept tool designed to validate the exploitation of the CVE-2026-31431 vulnerability on Linux systems. The exploit leverages the kernel's AFALG socket interface to inject a payload and obtain a root shell from an unprivileged user...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

bLuEkEeP-GUI

bLuEkEeP-GUI CVE-2019-0708 vulnerability testing and exploitation I am not responsible for the misuse of the software, it is for educational purposes only... bleukee-GUI serves both to test machines with the CVE-2019-0708 vulnerability and can also be used to hack, that is why I left the code ful...

procinfo

procinfo A portable process inspector for Linux and macOS. Get details about any running process instantly! Also see procinfominimal.sh - pure sh implementation of procinfo. Installation curl -fsSL https://raw.githubusercontent.com/wenekar/procinfo/main/procinfo.sh -o procinfo chmod +x procinfo...

copy-fail-CVE-2026-31431-universal

CVE-2026-31431 - AFALG AEAD Splice UAF PoC Multi-language implementation and compatibility with older versions of Python. C exploit.c gcc -o exploit exploit.c -O2 gcc -o exploit exploit.c -static -O2 ./exploit Tested on Ubuntu 20.04: Python exploit-python3-8-10.py Compatible with Python 3.8.10 an...

autoPwn

Warning Completely re-writing this right now. Focus will be on interactive Linux apps that only take input from stdin for starters. Attempting to use Shellphish's Driller and Fuzzer functionality. autoPwn in it's current state will do this in limited form. Simply run autoPwn ./binary then select...

Ethical-Hacking-Tools

Ethical-Hacking-Tools Show some 💚 and ⭐ the Repo to SUPPORT DOWNLOAD Kali Linux 🐉 Parrot OS 🦜 Remnux 🐝 bWAPP 💻 OWASP Juice Shop 🍹 NullSec Linux 🛡️ What is Hacking? 👾 Hacking is identifying weakness in computer systems or networks to exploit its weaknesses to gain access. Hacking can be carried out...

redxor

Linux Malware C2 'RedXOR' - an example detection This package serves as a demonstration of how Zeek can be used to detect the Linux backdoor "redXOR" using state based methods. References: Corelight blog...

CVE-2026-46331

CVE-2026-46331 pedit COW – Linux net/sched Packet-Editor Page-Cache Poisoning Vulnerability Executive Summary CVE-2026-46331 nicknamed “pedit COW” is a local Linux kernel privilege-escalation flaw in the traffic-control subsystem. An unprivileged user in an unprivileged network namespace can...

cplt

cplt Kernel-enforced sandbox for AI coding agents. cplt wraps GitHub Copilot CLI, OpenCode, Gemini CLI, Antigravity CLI, Pi, Claude Code, goose, DeepSeek Harness, or any shell, so the agent can write code but cannot steal credentials, push to main, merge PRs, or exfiltrate secrets. macOS : Apple...

dirtypipe

About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...

attack_range

Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs — Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...

pciem

PCIem A Linux kernel framework enabling synthetic userspace PCIe device emulation. | Documentation What is PCIem? PCIem is a framework that creates virtual PCIe devices in the Linux kernel by leveraging a few novel techniques to populate synthetic cards as legitimate PCI devices to the host OS. T...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes to Root on Every Major Linux Distribution CVE-2026-31431 Copy Fail is a logic bug in the Linux kernel's authencesn cryptographic template. It allows an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any...

mcpjam-to-root

⚠️ Disclaimer This repository is intended for authorized security research, penetration testing, and educational purposes only. Do not use the techniques described here against systems without explicit authorization. ⚡ MCPJam → Root From MCPJam Inspector RCE to root — CVE-2026-23744, JupyterLab...