5023 matches found
CVE-2024-32019-POC
Privilege Escalation via ndsudo Netdata Local Exploit This POC is used to exploit a vulnerable ndsudo utility bundled with Netdata to escalate local privileges to root. The exploit works by injecting a malicious binary into the user’s PATH that impersonates a trusted command nvme and is executed...
CVE-2023-2640-CVE-2023-32629
GameOverlay Ubuntu Privilege Escalation CVE-2023-2640 https://www.cvedetails.com/cve/CVE-2023-2640/ On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may set privileged extended attributes on t...
CVE-2025-32463
CVE-2025-32463 – Sudo EoP Exploit PoC with precompiled library This repository contains a proof-of-concept PoC exploit for CVE-2025-32463 , a local privilege escalation vulnerability in sudo discovered by Rich Mirch. Credit https://github.com/kh4sh3i/CVE-2025-32463 ⚠️ Disclaimer This PoC is for...
CVE-2021-4034
CVE-2021-4034 PolKit Local Privilege Escalation Analysis toc Vulnerability Overview Vulnerability ID: CVE-2021-4034 Vulnerability Score: Affected Product: linux PolKit pkexec Affected Versions: Versions from 2009 to present current 0.105 Reference http://its.dlut.edu.cn/info/1054/78309.htm Exploi...
CVE-2021-4034
CVE-2021-4034Reverse shell Exploit for Local Privilege Escalation Vulnerability in polkit’s pkexec...
pwnkit-go
Pwnkit-go This is a working exploit for the pwnkit vulnerability, CVE-2021-4034, written in Go Give it a try: create a vulnerable vagrant machine $ make vm ... build the binary and scp it to the vagrant box $ make scp ssh onto the vagrant box $ make ssh The default user is "vagrant"...
CVE-2021-4034
CVE-2021-4034 polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o...
make_me_root
CVE-2021-4034-PwnKit PwnKit PoC for Polkit pkexec CVE-2021-4034 Based on the PoC by blasty blasty-vs-pkexec.c For PwnKit details see the blog poet at Qualys PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec CVE-2021-4034...
berdav-CVE-2021-4034
CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...
CVE-2021-4034
CVE-2021-4034 polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by my Qualys team here PoC If the exploit is working you'll get a root shell immediately: kali@user:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o pwnkit.so...
CVE-2021-4034
CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...
CVE-2014-3153
Towelroot for Ubuntu x86 This exp has been tested on ubuntu 14.04 x86 and ubuntu 12.04.2 x86 successfully. Learning CVE2014-3153 and towelroot. Kernel through version 3.14, use rbtree to store rtwaiternot plistnode, more complex! IA have diffrent threadinfo with ARM!! Source from geekben/towelroo...
CVE-2013-6282
BUILDING: Download the android ndk, e.g: https://dl.google.com/android/repository/android-ndk-r10e-linux-x8664.zip I used android-ndk-10d Unzip it and install ensure ndk-build is in your PATH $ make root ndk-build NDKPROJECTPATH=. APPBUILDSCRIPT=./Android.mk APPPLATFORM=android-16 APPABI=armeabi...
CVE-2017-5123
CVE-2017-5123 PoC CVE-2017-5123 - LPE - Bypassing SMEP/SMAP. No KASLR The waitid implementation in upstream kernels did not restrict the target destination to copy information results. This can allow local users to write to otherwise protected kernel memory, which can lead to privilege escalation...
CVE-2009-2698
CVE-2009-2698 CVE-2009-2698 compiled for CentOS 4.8 https://github.com/SecWiki/linux-kernel-exploits/tree/4dca098e7491efc83903494d7c00f24c843aae99/2009/CVE-2009-2698 Detail hacker@localhost $ id uid=500hacker gid=500hacker groups=500hacker context=useru:systemr:unconfinedt hacker@localhost $ gcc...
pwnkit-exploit
pwnkit CVE-2021-4034 Privilege Escalation exploit sample This repository contains an exploit of CVE-2021-4034, a local privilege escalation in pkexec. This implementation is based on that described in the CVE disclosure, which you should read. If this works on your machine, it means you are...
CVE_2022_0847
CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...
CVE-2024-26169-Detail-1
CVE-2017-11882-metasploit This is a Metasploit module which exploits CVE-2017-11882 using the POC below: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about. Installation 1. Copy the cve201711882.rb to /usr/share/metasploit-framework/modules/exploits/windows/local...
sudo-CVE-2017-1000367
sudo-CVE-2017-1000367 http://www.openwall.com/lists/oss-security/2017/05/30/16 Compile: gcc -o sudopwn sudopwn.c -lutil Disclaimer: I had no clue what I was doing ;- Requirements System must be selinux-enabled sudo needs to be built with selinux support sudo -r User needs to have sudo permissions...