Critical: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.5.2 enhancement update

Updated Red Hat Enterprise Linux AI 3.5.2 container images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat Enterprise...

thc-tips-tricks-hacks-cheat-sheet

THC's favourite Tips, Tricks & Hacks Cheat Sheet https://thc.org/tips A collection of our favourite tricks. Many of those tricks are not from us. We merely collect them. We show the tricks 'as is' without any explanation why they work. You need to know Linux to understand how and why they work. G...

Critical: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.5.2 enhancement update

Updated Red Hat Enterprise Linux AI 3.5.2 container disk images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat...

dirtyclone-exploit

DirtyClone Exploit Framework CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9 ╔═══════════════════════════════════════════════════════════════╗ ║ ║ ║ | \ | | / | | ║ ║ | | | | | '| | | | | | | |/ | ' \ / \ ║ ║ | || | ...

CVE-2026-31431

CVE-2026-31431 — Copy Fail 中文版 732 Bytes to Root on Every Major Linux Distribution CVE-2026-31431 Copy Fail is a logic bug in the Linux kernel's authencesn cryptographic template. It allows an unprivileged local user to trigger a deterministic, controlled 4-byte write into the page cache of any...

firmware-workshop

Hands-on Firmware Extraction, Exploration, and Emulation Join us for this hands-on demo of Unblob, the flexible firmware extractor. During this workshop session, we will extract firmware from an EV charger, dig into the firmware, and eventually emulate it so we can interact with the services in...

social-analyzer

Social Analyzer - API, CLI, and Web App for analyzing & finding a person's profile across +1000 social media \ websites. It includes different analysis and detection modules, and you can choose which modules to use during the investigation process. The detection modules utilize a rating mechanism...

CVE-2026-31431-RCE-Exploit

🔴 CVE-2026-31431 — "Copy Fail" A 9-Year-Old Linux Kernel Logic Bug That Grants Root in Seconds Overview Copy Fail is a high-severity local privilege escalation LPE vulnerability in the Linux kernel's cryptographic subsystem algifaead. Discovered and disclosed by Theori via their Xint Code...

linux

Linux kernel The Linux kernel is the core of any Linux operating system. It manages hardware, system resources, and provides the fundamental services for all other software. Quick Start Report a bug: See Documentation/admin-guide/reporting-issues.rst Get the latest kernel: https://kernel.org Buil...

RingReaper

RingReaper RingReaper is a simple post-exploitation agent for Linux designed for those who need to operate stealthily, minimizing the chances of being detected by EDR solutions. The idea behind this project was to leverage iouring , the new asynchronous I/O interface in the Linux kernel,...

KITT

KITT 2.0 Penetration Testing Framework The KITT Penetration Testing Framework was developed as an open source solution for pentesters and programmers alike to compile the tools they use with what they know into an open source project. With KITT, users are able to easily access a list of commonly...

cyclepatrol

CyclePatrol re-invented wifi WarDriving -informational CyclePatrol is one Bash script, cp.sh. It is a Wi-Fi security assessment tool for the terminal. It runs on Linux and Android Kali NetHunter. It needs root. The tool runs in a loop. In each round it: 1. scans nearby Wi-Fi networks, 2. parses...

Exploits + Shellcode + GHDB

The Exploit Database Git Repository This is an official repository of The Exploit Database, a project sponsored by Offensive Security. Our repositories are: Exploits & Shellcodes: gitlab.com/exploit-database/exploitdb Binary Exploits: gitlab.com/exploit-database/exploitdb-bin-sploits Papers:...

copy-fail

Copy Fail PoC English Python PoC for CVE-2026-31431 , intended for controlled laboratory testing on authorized Linux systems. For use only in your own environments, labs, or systems where you have explicit permission. Do not run this code against third-party systems. Description copy-fail.py chec...

almalinux-fix-cve-2026-31431

CVE-2026-31431 algifaead and Dirty Frag CVE-2026-43284 Vulnerability Fix Updates the system to close the CVE-2026-31431 algifaead and Dirty Frag CVE-2026-43284 vulnerabilities found in the Linux kernel and automatically sets the secure kernel version as the default. English: This script...

cve-2026-31431-algif-aead-remediator

CVE-2026-31431 / GHSA-2274-3hgr-wxv6 — algifaead Remediator Severity: High CVSS 7.8 — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Background CVE-2026-31431 is a local privilege escalation vulnerability in the Linux kernel's algifaead module AFALG AEAD crypto socket interface. A low-privileged...

Exploit for CVE-2026-98432

cve-2026-98432-audit !CVEhttps://img.shields.io/badge/CVE-...

Mitigaciones

CVE-2026-31431 "Copy Fail" Mitigations Collection of automation scripts and playbooks for the detection and mitigation of vulnerability CVE-2026-31431 local privilege escalation via page cache corruption in setuid binaries on Linux systems. Repository Contents cve-2026-31431-mitigator.sh :...

CVE-2026-31431-PoC

Copy Fail - Python 3.9 PoC CVE-2026-31431 The public Copy Fail exploit wasn't compaitble with python 3.9, this one is. The original was modifed by replacing the unavailable os.splice with a lightweight ctypes polyfill. 🚨 LEGAL DISCLAIMER CFAA & Related Laws THIS SOFTWARE IS PROVIDED FOR EDUCATION...

TheDefendersGuide

The Defender's Guide - It's Dangerous to Defend Alone, Take This! What is the Defender's Guide? The Defender's Guide is a project by Luke Paine and Jonathan Johnson to put all of the best defense resources for a particular aspect of an operating system into a single place. Too often as defenders ...