AMBER-ICI

AMBER ICI v5 AMBER ICI AMBER Investigative Command Interface is a local-first browser interface for investigative and analytical workflows powered by a local Ollama server. It includes: A single-model Analyst Console and multi-model Parallel execution A user-defined agent chain driven from the ma...

CVE-2024-2053

LFI to RCE Exploit via Log Poisoning Python3 exploit for CVE-2024-2053 Artica Proxy 📝 Description This Python3 script exploits Local File Inclusion LFI vulnerabilities to achieve Remote Code Execution RCE through log poisoning techniques. Specifically designed for Artica Proxy CVE-2024-2053 but...

CVE-2026-46215-POC

CVE-2026-46215: DRM GEM changehandle Use-After-Free unprivileged LPE Local privilege escalation via a use-after-free in the DRM core ioctl DRMIOCTLGEMCHANGEHANDLE drmgemchangehandleioctl, ioctl nr 0xD2. Reachable by any user with access to a render node /dev/dri/renderD, granted to the active...

CVE-2025-27591-Below

CVE-2025-27591-Below 📌 Description This is a proof-of-concept PoC exploit for CVE-2025-27591 , a local privilege escalation vulnerability in the below system monitor tool. The issue arises from unsafe handling of log files /var/log/below/errorroot.log when executed with elevated privileges. By...

CVE-2023-41717

CVE-2023-41717 Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions. Executive Summary During the summer of 2022, I have found a vulnerability affecting the ZScaler proxy versions 3.6.1.25 and prior. This...

DirtyPIPE-CVE-2022-0847

CVE-2022-0847 POC Source: https://www.exploit-db.com/exploits/50808 1. Compile In Linux, compile the POC with gcc -o dirty dirty.c 2. Usage Execute the program with ./dirty SUID, where SUID refers to the path of a program with the SUID bit set. Commonly, you can use /usr/bin/passwd, i.e., run...

Check-for-CVE-2023-32629-GameOver-lay

Check for CVE-2023-32629 GameOverlay Script Overview: The script is designed to perform security checks on an Ubuntu system to detect vulnerabilities related to the GameOverlay flaws. It checks for two specific vulnerabilities, CVE-2023-2640 and CVE-2023-32629, which are present in the Linux...

CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll A high-severity Use-After-Free vulnerability affecting the Linux Kerneleventpoll subsystem that may allow local privilege escalation, memory corruption, or denial of service. 📖 Overview CVE-2026-46242 is a Use-After-Free UAF vulnerability in the Linux Kernel's eventpol...

LFI-FINDER

🍀 LFI FINDER TOOL 🍀 Written by TMRSWRR Version 1.0.0 Instagram: TMRSWRR 📹 How to use 📹 Click on the image... LFI-FINDER is an open-source tool available on GitHub that focuses on detecting Local File Inclusion LFI vulnerabilities. Local File Inclusion is a common security vulnerability that allow...

CVE-2017-7472

CVE-2017-7472 The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service memory consumption via a series of KEYREQKEYDEFLTHREADKEYRING keyctlsetreqkeykeyring calls. Shortcut Vulnerable kernel 4.10.13...

METATRON

METATRON AI-powered penetration testing assistant using local LLM on linux Parrot OS 🔱 METATRON AI-Powered Penetration Testing Assistant 📌 What is Metatron? Metatron is a CLI-based AI penetration testing assistant that runs entirely on your local machine — no cloud, no API keys, no subscriptions...

dirtypipez-exploit

CVE-2022-0847 DirtyPipe Exploit. Credit: Max Kellermann [email protected] A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits. Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe'...

Lfi-Space

🪐 LFI-SPACE TOOL 🪐 Written by TMRSWRR Version 1.0.0 All in one tools for LFI VULN FINDER -LFI DORK FINDER Instagram: TMRSWRR 📷 Screenshots 📷 👇 💫 How to use 💫 👇...

CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

raxe-ce

Threat Detection for AI Agents Stop prompt injection, jailbreaks, and tool attacks before they execute. 100% local. Sub-5ms rule matching. Free forever. root@kitploit: pip install raxe && raxe scan "Ignore all previous instructions" Requires Python 3.10+ • 515+ rules + ML detection included Built...

prismor

Prismor Claude Code, Codex, Langchain 및 기타 AI 에이전트 프레임워크/하네스를 위한 런타임 보안. Prismor는 사용자 자신의 정책에 따라 고도로 커스터마이즈할 수 있습니다. 관찰 또는 강제 모드를 통해 로컬 셀프서브 대시보드에서 에이전트 활동을 확인하세요 웹사이트 • Skill로 온보딩 !Trae / Trae CNhttps://d205xtizsu1yjh.cloudfront.net/icons/coding-agents/...

AddUser-SAMR

AddUser-SAMR Create local administrators using the SAMR API, operating at a lower level than net.exe, PowerShell's New-LocalUser or NetUserAdd API. It requires Administrator privileges and if the user exists, it gets added to the group but the password is not updated. There are 4 implementations ...

CVE-2020-10665

CVE-2020-10665 Docker Desktop 로컬 권한 상승 Docker Desktop 로컬 권한 상승에 대한 POC입니다. https://www.activecyber.us/activelabs/docker-desktop-local-privilege-escalation-cve-2020-10665의 분석 글을 기반으로 제작되었습니다. 하드링크 생성은 https://github.com/googleprojectzero/symboliclink-testing-tools에서 가져와 적용했습니다. 이 익스플로잇은 Everyone 그...

CVE-2022-0847

DIRTY PIPE CVE-2022-0847 これは、任意の読み取り専用ファイル内のデータを上書きできるようにするカーネル脆弱性です。そのため、非特権プロセスが特権プロセスに書き込むことができるため、権限昇格につながる可能性があります。脆弱性を発見し、その優れた説明・解説を提供した 🥇Max Kellermann にすべての功績を帰属します。 👻 重要なお知らせ この概念実証コードは Max Kellermann's の PoC...

CVE-2026-43499-OnePlus15

CVE-2026-43499 — OnePlus 15 LPE Educational PoC WARNING: This repository is provided for educational and research purposes only. No pre-built binaries or releases are distributed. You must build everything from source. Android 16 local privilege escalation for OnePlus 15. Fork of...