attezt

attezt attezt is a suite of remote attestation tools. It provides several components that allows Linux systems to have hardware backed device certificates over the device-attest-01 ACME challenge. This is useful for environments where you want a strong device identity claim for things like x509...

CVE-2026-34990-CUPS-LPE-PoC

CVE-2026-34990 | CUPS Local Privilege Escalation PoC A generic proof-of-concept for CVE-2026-34990 , a local privilege escalation vulnerability affecting CUPS 2.4.16. The exploit demonstrates how a local unprivileged user can abuse CUPS local authentication and printer configuration behavior to...

CVE-2026-72018

CVE-2026-72018 — Linux Kernel Out-of-Bounds Write Linux Kernel • DIBS Loopback • Out-of-Bounds Write Security research and technical analysis of CVE-2026-72018. 01 — Overview CVE-2026-72018 is a Linux kernel out-of-bounds write vulnerability affecting the DIBS/ISM loopback functionality. The...

CVE-2026-43503

CVE-2026-43503 DirtyClone - PoC - SecurewithUmer PoC de DirtyClone — una vulnerabilidad local de escalada de privilegios en el kernel de Linux. Este repositorio contiene una prueba de concepto funcional que permite a un usuario local sin privilegios obtener privilegios de root explotando la...

CVE-2026-76266

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The...

CVE-2014-3153

Towelroot para Ubuntu x86 Este exploit ha sido probado en ubuntu 14.04 x86 y ubuntu 12.04.2 x86 con éxito. Aprendiendo CVE2014-3153 y towelroot. Kernel hasta la versión 3.14, usa rbtree para almacenar rtwaiter no plistnode, ¡más complejo! IA tiene threadinfo diferente a ARM!! Fuente de...

Kali-Setup

Script de Personalización de Kali Esta idea del script fue tomada originalmente de g0tmi1k https://github.com/g0tmi1k/os-scripts. No reclamo crédito por la base del script. Dicho esto, he agregado un MONTÓN más de herramientas y corregido muchos errores de la versión original. Mantengo esto y lo...

D3m0n1z3dShell

「😈」Acerca de D3m0n1z3dShell Demonized Shell es una herramienta avanzada para persistencia en Linux. Instalación git clone https://github.com/MatheuZSecurity/D3m0n1z3dShell.git cd D3m0n1z3dShell chmod +x demonizedshell.sh sudo ./demonizedshell.sh Instalación con una línea Descargar D3m0n1z3dShell...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

exploit-cve-2017-5715

Spectre attack Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the safety checks of said best practices actually increase the attack surface and may make applications...

mXtract

mXtract mXtract es una herramienta de código abierto basada en Linux que analiza y vuelca la memoria. Está desarrollada como una herramienta de pruebas de penetración; su propósito principal es escanear la memoria en busca de claves privadas, direcciones IP y contraseñas mediante expresiones...

PrivEsc

PrivEsc por 1N3@CrowdShield http://crowdshield.com ACERCA DE: Una colección de scripts y exploits de escalada de privilegios para Windows, Linux y MySQL. ENLACES: Para exploits locales de Linux precompilados, visita https://www.kernel-exploits.com. DONACIONES: Las donaciones son bienvenidas. BTC...

WPCracker

WPCracker Herramienta de enumeración de usuarios y fuerza bruta de inicio de sesión para WordPress en Windows y Linux Con la herramienta de fuerza bruta, puedes controlar la agresividad del ataque que deseas realizar, y esto afecta el tiempo de ataque requerido. La herramienta permite ajustar el...

SimplesApachePathTraversal

SimplesApachePathTraversal Simples Apache Path Traversal Es una herramienta simple para probar la vulnerabilidad Apache Path Traversal https://blog.mrcl0wn.com/2021/10/uma-simples-tool-para-apache-path.html Autor: MrCl0wn Blog: https://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitte...

CVE-2022-1015

CVE-2022-1015 This repository contains a PoC for local privilege escalation of CVE-2022-1015, a bug in the nftables component of the linux kernel that I found. You can read a detailed analysis of this vulnerability and the exploitation strategy over at my blog. Right now, the exploit is a bit...

cve-2011-3026-firefox

cve-2011-3026-firefox Example of exploiting CVE-2011-3026 on Firefox Linux/x86, from our Black Hat 2012 talk: "Exploiting the jemalloc Memory Allocator: Owning Firefox's Heap" Original slide deck available at: https://www.blackhat.com/html/bh-us-12/bh-us-12-archives.htmlArgyroudis Updated slide...

CVE-2021-33624

Prueba de Concepto para CVE-2021-33624 compilar con gcc -pthread -o bpfspectretypeconfusion bpfspectretypeconfusion.c -Wall -ggdb -std=gnu99 ejecutar con sudo ./bpfspectretypeconfusion 1 2 ffffffffa4925620 0x10 donde 1 y 2 son hilos de CPU que se ejecutan en dos núcleos de hardware distintos,...

EUVD-2026-94618

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The...

CVE-2026-76266 Local Privilege Escalation through Linux Package Upgrades in Splunk Enterprise

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The...

CVE-2026-76266

Splunk Enterprise on Linux versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 is vulnerable to Local Privilege Escalation . A local user capable of running commands as the Splunk Enterprise user account can trigger the execution of attacker-controlled operating-system commands with root privilege...