rootOS

rootOS Tries to use various CVEs to gain sudo or root access. All exploits have an end goal of adding ALL ALL=ALL NOPASSWD: ALL to /etc/sudoers allowing any user to run sudo commands. Run python root.py Exploits Name| CVE| Date| Links ---|---|---|--- ARDAgent| CVE-2008-2830| 06/23/2008|...

cve-2014-0038

Local root exploit for CVE-2014-0038 Bug: The X86X32 recvmmsg syscall does not properly sanitize the timeout pointer passed from userspace. Exploit primitive: Pass a pointer to a kernel address as timeout for recvmmsg, if the original byte at that address is known it can be overwritten with known...

CVE-2021-3156

CVE-2021-3156 xchg@ubuntu:/Desktop/CVE-2021-3156$ ./sudo-hax-me-a-sandwich CVE-2021-3156 PoC by blasty [email protected] usage: ./sudo-hax-me-a-sandwich available targets: 0 Ubuntu 20.04.1 Focal Fossa - sudo 1.8.31, libc-2.31 1 Debian 10.0 Buster - sudo 1.8.27, libc-2.28...

hp-slate7-root-kit

Root for the HP Slate 7 2800 on Android 4.1.1 English | Русский This repository contains a complete, self-contained kit for obtaining persistent root access on the HP Slate 7 2800 running firmware 1.05.18 and kernel Linux 3.0.8+ by exploiting the local vulnerability CVE-2015-1805. The kit was run...

CVE-2025-32463

CVE-2025-32463 Detection Framework A comprehensive security monitoring and detection framework designed to identify exploitation attempts targeting the sudo chroot privilege escalation vulnerability CVE-2025-32463. This project demonstrates advanced threat detection methodologies, incident respon...

LGPwn

LGPwn LG Root Exploit Author: [email protected] Special Thanks: Juggie, for pointing out an odd binary in an update spritebud, that lead to me finding this vulnerability. Subject: Race condition in Sprite Software?s backup software, installed by OEM on LG Android devices. CVE ID: CVE-2013-36...

CVE-2014-7911_poc

CVE-2014-7911poc Local root exploit for Nexus5 Android 4.4.4KTU8P author: retme [email protected] @returnsme on twitter & @retme on weibo website: retme.net how to build Import the project into eclipse,and build. ./cve20147911/assets/msmattack is the binary file of CVE-2014-4322 exploit.You...

CVE-2021-4034

CVE-2021-4034 https://raw.githubusercontent.com/hackingyseguridad/CVE-2021-4034/main/binario Copy the RAW content and paste it into the Bash shell console: CVE-2021-4034 vulnerability, severity 7.8, dated 18/11/2021, in the pkexec component of Polkit https://gitlab.freedesktop.org/polkit/polkit/...

dissecting-pkexec-cve-2021-4034

Dissecting pkexec CVE-2021-4034 Introduction and Usage Introduction This is a part of the blog post that explains how CVE-2021-4034 actually works. Usage This repository contains a single C file that contains code and comments, the compilation and running the file is fairly straight forward: gcc...

CVE-2022-37706

CVE-2022-37706 Hello guys, this time I'm gonna talk about a recent 0-day I found in one of the main window managers of Linux called Enlightenment https://www.enlightenment.org/. This 0-day gonna take any user to root privileges very easily and instantly. The exploit is tested on Ubuntu 22.04, but...

MagiskEoP

Introduction This is an exploit for a vulnerability CVE-2024-48336 in Magisk app that allows a local app to silently gain root access without user consent. Vulnerability was initially reported by @vvb2060 and PoC-ed by @canyie. It has been fixed in Canary 27007. Demo video for exploit this...

CVE-2021-4034

CVE-2021-4034 https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Build To compile, just use make Note : CentOS 8 Stream doesn't have dev tools. Install them with: dnf groupinstall 'Development Tools' Usage Execute ./cve-2021-4034 If your distro is vulnerable you will get root!...

kernel-exploits

Kernel Exploits Various kernel exploits CVE-2021-22555 Linux local root exploit. Updated version of theflow's exploit for CVE-2021-22555. A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/xtables.c. This allows an attacker to gain privileges or cause a D...

CVE-2023-52654

Run file python3 CVE-2023-52654.py or sudo CVE-2023-52654.py latest kernel bypass root updated POC just run python file with root or without root ✅ Features Automatically escalate privileges on Unix systems by exploiting misconfigured setuid/setgid binaries, capabilities, and sudo permissions...

CVE-2019-13272

CVE-2019-13272 Linux local root exploit Linux 4.10 5.1.17 PTRACETRACEME local root CVE-2019-13272 In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtai...

CVE-2025-32463

CVE-2025-32463 Exploit This is the exploit for the CVE-2025-32463 Thanks to Rich Mirch @0xm1rch on X @ Stratascale for reporting this amazing vulnerability. Original Post: Vulnerability Advisory: Sudo chroot Elevation of Privilege NVD: CVE-2025-32463 CVSS 9.3 Affected Versions Vulnerable builds o...

CVE-2021-3560

Polkit Vulnerability - CVE-2021-3560 📕 Introduction In 2021, a researcher named Kevin BackHouse discovered a privilege escalation vulnerability in the polkit utility. however, not all linux versions are vulnerable to polkit. Below is an example of a vulnerable version; Red Hat Enterprise Linux 8...

LARE

LARE L ocal A uto R oot E xploiter is a simple bash script that helps you deploy local root exploits from your attacking machine when your victim machine do not have internet connectivity. The script is useful in a scenario where your victim machine do not have an internet connection eg. while yo...

CVE-2026-31431-check

CVE-2026-31431 check Read-only checker for the algifaead local-root vuln CVE-2026-31431. Looks at kernel config, module state, AFALG socket reachability, and any mitigations you've put in place, then prints a verdict. It does not run exploit code. Companion to dirty-frag-check CVE-2026-43284 /...

Exploiting-a-Linux-kernel-vulnerability

Exploiting-a-Linux-kernel-vulnerability - IT19159140 Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same...