CVE-2022-29968

CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 uninitialized memory in the Linux Kernel, specifically the iouring system. The crash was found with Syzkaller. The crash was analyzed by Joseph Ravichandran and Michael Wang. The exploit was written by Joseph Ravichandran. We found &...

oppo-ghostlock

oppo-ghostlock GhostLock CVE-2026-43499 — OPPO Find N2 Linux Kernel Privilege Escalation Research Project Overview GhostLock CVE-2026-43499 is a kernel stack UAF vulnerability affecting Linux 2.6.39 through 7.1-rc1, triggered via a FUTEXCMPREQUEUEPI race condition. This project ports the x8664...

CVE-2021-3560

PolicyKit CVE-2021-3560 Exploitation Authentication Agent C implementation of CVE-2021-3560 exploitation, blog posts about this exploitation: https://ricterz.me/posts/2022-04-28-a-new-exploit-method-for-cve-2021-3560-polkit-linux-privilege-escalation.txt...

netsec-project

Project Name CVE-2021-22555 attack script Description This project is an automatic attack tool implemented in Python. It performs various security tests and attacks on a target system running Ubuntu 20.04 with kernel version 5.8.0-48. The tool includes functionalities such as ping, live host...

mimipenguin

MimiPenguin 2.0 Un outil pour extraire le mot de passe de connexion de l'utilisateur actuel du bureau Linux. Adapté de l'idée derrière l'outil Windows populaire mimikatz. Cela a été assigné CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fait amusant, ce n'est toujours pas corrigé après...

threatbox

Threatbox - Plateforme d'attaque standard ThreatBox est une plateforme d'attaque standard et contrôlée basée sur Linux. J'utilise une version de celle-ci depuis des années. Elle a commencé comme un ensemble de scripts, a vécu comme une machine virtuelle roulante, a existé en tant que code pour...

airgeddon

airgeddon Ceci est un script bash multi-usage pour les systèmes Linux afin d'auditer les réseaux sans fil. Toutes les informations nécessaires sur la façon d'« installer | utiliser | profiter » de airgeddon sont présentes sur le Wiki GitHub. I. Contenu et fonctionnalités Accueil Fonctionnalités...

CVE-2021-33909

Sequoia CVE-2021-33909 Building gcc exploit.c -o exploit Running chmod +x exploit ./exploit One-Liner gcc exploit.c -o exploit;chmod +x exploit;./exploit Credits...

chronomaly

Chronomaly Chronomaly — это эксплойт ядра для Android/Linux, использующий CVE-2025-38352. Эксплойт был написан специально для ядра Linux v5.10.157, но должен работать против всех уязвимых ядер v5.10.x, так как для его работы не требуется каких-либо конкретных смещений текста ядра. Я подробно опис...

tcpflow

TCPFLOW 1.5.0 Répertoire de téléchargement : http://digitalcorpora.org/downloads/tcpflow/ Installation La plupart des distributions GNU/Linux courantes incluent tcpflow dans leurs dépôts. Ainsi, sur Debian/Ubuntu/etc, vous pouvez taper : sudo apt-get install tcpflow et sur Fedora/RedHat/CentOS/et...

kernel-exploits

Эксплойты ядра Различные эксплойты ядра CVE-2021-22555 Локальный root-эксплойт для Linux. Обновлённая версия эксплойта theflow для CVE-2021-22555. Запись за пределами буфера в куче, затрагивающая Linux начиная с v2.6.19-rc1, была обнаружена в net/netfilter/xtables.c. Это позволяет атакующему...

android_kernel_xiaomi_sunny

Linux kernel This file was moved to Documentation/admin-guide/README.rst Please notice that there are several guides for kernel developers and users. These guides can be rendered in a number of formats, like HTML and PDF. In order to build the documentation, use make htmldocs or make pdfdocs. The...

K000163577: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-53039 In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate group add input before caching BUG OCFS2IOCGROUPADD can trigger a BUGON in ocfs2setnewbufferuptodate: kernel BUG at fs/ocfs2/uptodate.c:509! Oops: invalid opcode: 0000 ...

venom

VENOM 1.0.17 - générateur/compilateur de shellcode metasploit Version : v1.0.17 Auteur : pedro ubuntu r00t-3xp10it Nom de code : Aconit Aconitum napellus Distributions supportées : Linux Ubuntu, Kali, Mint, Parrot OS Suspicious-Shell-Activity SSA RedTeam développé @2019 AVERTISSEMENT LÉGAL L'aute...

CVE-2014-6271

Shellshock Exploitation CVE-2014-6271 Shellshock is effectively a Remote Command Execution vulnerability in BASH. This script exploits the vulnerability in the web environment on apache or similar with modcgi enabled. The vulnerability lies in the manipulation of environment variables, which are...

K000163576: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-52911 In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn-binding slowpath to bound sessions only When the binding SESSIONSETUP sets conn-binding = true, the flag stays set after the call so that the global session lookup in...

CVE-2021-42008

CVE-2021-42008 Exploiting A 16-Year-Old Vulnerability In The Linux 6pack Driver Reference https://syst3mfailure.io/sixpack-slab-out-of-bounds...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

hashcatch

hashcatch Hashcatch déauthentifie les clients connectés à tous les réseaux WiFi à proximité et tente de capturer les handshakes. Il peut être utilisé sur tout appareil Linux, y compris les Raspberry Pi et les appareils Nethunter, afin de capturer des handshakes en promenant son chien. Écrit par...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...