610545 matches found
CVE-2022-0847
gcc exploit.c -o exploit -std=c99 ./exploit Usage: ./exp TARGETFILE OFFSET DATA In the /etc/passwd file, find the offset of the normal user's uid, change the uid to 0, then log in again to get root privileges. Scope of Impact Linux Kernel version = 5.8 Linux Kernel version 5.16.11 / 5.15.25 /...
CVE-2021-43267
CVE-2021-43267 Local PoC exploit for CVE-2021-43267 Linux TIPC Reference: https://haxx.in/posts/pwning-tipc/...
lama
lama Lama, the application that does not mince words. Description Lama is a GNU Linux tool to generate a word list. The goal is to obtain a custom password dictionary to a particular target, whether physical or moral. It is therefore important that words in this list correspond to the target. Kee...
CVE-2023-0179-PoC
Needle CVE-2023-0179 exploit This repository contains the exploit for my recently discovered vulnerability in the nftables subsystem that was assigned CVE-2023-0179, affecting all Linux versions from 5.5 to 6.2-rc3, although the exploit was tested on 6.1.6. The vulnerability details and writeup c...
chef-ssh-hardening
ssh-hardening Chef cookbook 1 2 3 4 Description This cookbook provides secure ssh-client and ssh-server configurations. This cookbook does not provide capabilities for management of users and/or ssh keys, please use other cookbooks for that. Requirements Chef = 14.13.11 Platform Debian 8, 9, 10...
chimera
Chimera Sandbox untrusted code with safe access to the host. Chimera is a userspace sandbox for code you don't fully trust ā a natural fit for coding agents that run arbitrary, generated commands on a machine they share with you. It confines what a process can do to the host while still letting i...
attack_range
Splunk Attack Range v5 The Splunk Attack Range builds instrumented cloud environments AWS, Azure, GCP, simulates attacks, and forwards data into Splunk for detection development and testing. What it does: Build labs ā Deploy a small, production-like lab Splunk, Windows/Linux servers, optional Kal...
CVE-2026-98927
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM subsystem on ARM64 platforms. In nested virtualization setups, reallocating shadow page table memory during virtual processor initialization can leave an active virtual processor referencing memory that has already been freed...
pwnkit
pwnkit Usage Tested on Arch Linux and Ubuntu 18.04 git clone https://github.com/c3l3si4n/pwnkit; make ./pwnkit...
poc-CVE-2025-38352
š poc-CVE-2025-38352 - Easy Download for a Security Tool š„ Download Now š Overview This application is a proof of concept for CVE-2025-38352. It demonstrates a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin notes that this vulnerability ha...
NFSundown
Overview Proof-of-Concept exploit for NFSundown CVE-2025-38089. It can remotely trigger a kernel crash in an NFS server. Details A remote attacker can trigger a kernel null pointer dereference and crash the kernel by sending a specially crafted RPC request. This occurs due to improper handling of...
CVE-2026-98952
A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP component. A remote attacker can exploit this vulnerability by sending a truncated or fragmented PFCP packet with the session flag enabled, causing the kernel to read memory beyond the end of the packet buffer. This...
Silverseal
Silverseal - Linux Bootkit and Rust Kernel Rootkit Framework Silverseal is an open-source Linux bootkit research framework written in Rust. It demonstrates how a UEFI bootkit can hook the early Linux kernel boot process to persistently and stealthily load a Rust-based kernel module rootkit. The...
CVE-2022-0847_dirty-pipe
CVE-2022-0847 / Dirty Pipe Hacked up Dirty Pipe CVE-2022-0847 PoC that hijacks a SUID binary to spawn a root shell. and attempts to restore the damaged binary as well Score CVSS : 7.8 HIGH A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper...
penelope
Penelope is a modern shell handler for penetration testers and CTF players. It provides a more capable alternative to basic netcat listeners, adding automatic PTY upgrades, session management, logging, file transfers and helper modules. Table of Contents š„ Installation āļø Features š„ļø Session...
thanatos
Thanatos Thanatos is a Windows and Linux C2 agent written in rust. Installation To install Thanatos, you will need Mythic set up on a machine. In the Mythic root directory, use mythic-cli to install the agent. sudo ./mythic-cli install github https://github.com/MythicAgents/thanatos sudo...
aircrack-ng
Aircrack-ng Badges GitHub CI Others !Codespellhttps://github.com/a...
dirtypipe
About: Title: DirtyPipe Description: Exploit for a new Linux vulnerability known as 'Dirty PipeCVE-2022-0847' allows local users to gain root privileges. AUTHOR: drapl0n Version: 1.0 Category: Execution Target: Linux operating systems. Attackmodes: HID, Storage DirtyPipe: Exploit for a new Linux...
cve-2021-3156
sudo Heap Overflow Vulnerability CVE-2021-3156 Vulnerability Overview A foreign research team discovered a sudo heap overflow vulnerability CVE-2021-3156, which had been hidden for a decade. An ordinary user can exploit this vulnerability to gain root privileges on a sudo host with default...
Copy-Fail
CVE-2026-31431 "Copy Fail" - Local Privilege Escalation Python 3.7+ compatible version including Astra Linux Safe check without exploitation: curl -s https://raw.githubusercontent.com/p401a-ops/Copy-Fail/refs/heads/main/detect.py | python3 Exploitation when prompted, you will need to enter the us...