CVE-2026-22009-Linux-eBPF-Map-Locking-Race-Use-After-Free

CVE-2026-22009 – Linux eBPF Map Locking Race → Use‑After‑Free Program Code C simulation root@kitploit: // ebpfmapuaf.c - Simulated concurrent map update/free include include include include void mapdata = NULL; int mapfreed = 0; void updatemapvoid arg // Simulate eBPF program updating map if...

argumentinjectionhammer

Argument Injection Hammer Argument Injection Hammer is an extension for the intercepting proxy Burp Suite that extends the scanner's ability to detect argument injection and manipulation vulnerabilities in web applications and web services. A web application is vulnerable to argument injection wh...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

CVE-2017-5123

CVE-2017-5123 Linux privilege escalation exploiting waitid syscall. The exploit is brought to you by @XeR0x2A and @chaignc from HexpressoTeam for educational purposes only. The bug was introduced the 2017-05-21 and fixed 2017-10-09, 4.14.0-rc4+ is known vulnerable. asciicast If you have a...

CVE-2022-0847

CVE-2022-0847 Linux “Dirty Pipe” vulnerability gives unprivileged users root access...

CVE-2021-22555

CVE-2021-22555 Linux Kernel 2.6.19 5.9 - 'Netfilter Local Privilege Escalation'...

msidump

msidump MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner. On Macro-enabled Office documents we can quickly use oletools mraptor to determine whether document is malicious. If we want to dissect it further, we...

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...

CVE-2011-3368

CVE-2011-3368 PoC Exploit. cve-2011-3368 Install: git clone https://github.com/colorblindpentester/CVE-2011-3368 cd CVE-2011-3368 python2 CVE-2011-3368.py Tested on: OS X macos Parrot OS Kali linux...

vinieger-CVE-2025-48384-Dockerfile

vinieger-CVE-2025-48384-Dockerfile This provised a PoC dockerfile image for CVE-2025-48384, related to https://github.com/vinieger/CVE-2025-48384, so it can be tested inside a Kubernetes cluster. Deploying it to GKE: Building and Publishing to GCP registry: change your registry path root@kitploit...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

linux-4.1.15_CVE-2023-28772

Linux kernel release 4.x http://kernel.org/ These are the release notes for Linux version 4. Read them carefully, as they tell you what this is all about, explain how to install the kernel, and what to do if something goes wrong. WHAT IS LINUX? Linux is a clone of the operating system Unix, writt...

CVE-2022-23222

CVE-2022-23222 Click here if you just wanna build and run the dang thing. What follows is more or less a translation of the Chinese writeup, available here. We'll use the mainline kernel code for version 5.13.0 as a reference. There is a mismatch in available pointer types and the function that...

Dirty-Pipe

CVE-2022-0847 Dirty Pipe Exploit Affected versions =5.8, 5.16.11, 5.15.25 and 5.10.102 exp.c Use this vulnerability to overwrite read-only files exp-root-shell.c Generate shellcode that executes /bin/sh to overwrite a SUID program owned by root, using passwd as an example. Then run the overwritte...

CVE-2022-0492-Docker-Breakout-Checker-and-PoC

CVE-2022-0492 Docker Breakout Checker and PoC Summary Exploiting the vulnerability requires the attacker to have access to a Docker container running on a vulnerable system. Once exploited, the attacker can escape the container and gain complete control over the host system. A vulnerability was...

ArchStrike

ArchStrike An Arch Linux repository for security professionals and enthusiasts. Done the Arch Way and optimized for i686, x8664, ARMv6, ARMv7, and ARMv8. Our website Our Twitter ArchStrike is a penetration testing and security repository for users of Arch Linux, following Arch Linux standards to...

climber

Climber Automated auditing tool to check UNIX/Linux systems misconfigurations which may allow local privilege escalation. Dependencies python = 2.7 python-crypto python-mako python-paramiko Note Climber needs Exscript, a Python module and a template processor for automating network connections ov...

CVE-2014-6271

Shellshock Exploitation CVE-2014-6271 Shellshock is effectively a Remote Command Execution vulnerability in BASH. This script exploits the vulnerability in the web environment on apache or similar with modcgi enabled. The vulnerability lies in the manipulation of environment variables, which are...

drow

drow Description TL;DR drow is a command-line utility that is used to inject code and hook the entrypoint of ELF executables post-build. It takes unmodified ELF executables as input and exports a modified ELF contianing an embedded user-supplied payload that executes at runtime. Slightly more...

dirtycaw-projet

Dirty COW - Privilege Escalation CVE-2016-5195 This project demonstrates a privilege escalation using the Dirty COW vulnerability in a virtual machine with Ubuntu Server 16.04.1 and kernel 4.4.0-31-generic. 🔧 Environment Victim machine : Ubuntu 16.04.1 vulnerable student without privileges Attack...