238259 matches found
CVE-2024-50804
CVE-2024-50804 Writeup can be found on my blog below. Thanks! https://g3tsyst3m.github.io/cve/msi/Arbitrary-Write-Privilege-Escalation-CVE-2024-50804/...
LFISuite
LFI Suite What is LFI Suite? LFI Suite is a totally automatic tool able to scan and exploit Local File Inclusion vulnerabilities using many different methods of attack, listed in the section Features. Features Works with Windows, Linux and OS X Automatic Configuration Automatic Update Provides 8...
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project
CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project The project documents the completion and analysis of the Fragnesia CVE-2026-46300 TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached...
isowall
isowall Este es un mini-cortafuegos que aísla por completo un dispositivo objetivo de la red local. Esto sirve para permitir a máquinas infectadas acceso a Internet, pero sin poner en peligro la red local. Compilación Este proyecto depende de libpcap y, por supuesto, de un compilador de C. En...
CVE-2023-22809-automated-python-exploits
CVE-2023-22809-automated-python-exploits automatically exploit the sudoedit vulnerability fo CVE-2023-22809 For guide use the following link https://medium.com/@spydomain1/cve-2023-22809-f36a2b3804b3 CVE-2023-22809 Automated Exploit - Python Script 📌 Description This Python script automates the...
Ghostcat-Tomcat-AJP-Exploit-Py3
Tomcat Ghostcat CVE-2020-1938 / CNVD-2020-10487 Vulnerability Detection Tool Introduction This project provides a Python verification script for verifying the Apache Tomcat AJP protocol local file inclusion vulnerability commonly known as Ghostcat, CVE-2020-1938 / CNVD-2020-10487. This script is ...
CVE-2023-1326-PoC
CVE-2023-1326-PoC A proof of concept for CVE-2023–1326 in apport-cli 2.26.0 This vulnerability is privilege escalation in apport-cli 2.26.0, similar to CVE-2023–26604, this vulnerability only works if assign in sudoers: A privilege escalation attack was found in apport-cli 2.26.0 and earlier whic...
CVE-2025-32462-Exploit
CVE-2025-32462-Exploit: Matrix-Sudo Escape Hostname Spoofing Privilege Escalation CVE-2025-32462 "You take the blue pill... the story ends. You take the red pill... you get root." Description This exploit demonstrates a privilege escalation vulnerability in sudo CVE-2025-32462 where hostname-base...
CVE-2025-32463
CVE-2025-32463 通过 Sudo chroot 在 Linux 中实现本地权限提升至 Root。 这是啥？ 有关新闻可以在这里阅读： https://www.helpnetsecurity.com/2025/07/01/sudo-local-privilege-escalation-vulnerabilities-fixed-cve-2025-32462-cve-2025-32463/ TL;DR 和 CMIIW 就是说，sudo 是用来以管理员/root 身份执行命令的。只有属于 sudoers 组的用户才能使用 sudo。但 sudo...
CVE-2026-46242
CVE-2026-46242 full poc and lpe Kernel Range Status Notes 5.15.209 - 5.16 Affected Backported introducing commit 6.1.175 - 6.2 Affected Backported introducing commit 6.4 - 6.18.32 Affected Bug introduced in mainline 6.4 6.19 - 7.0.9 Affected Includes latest stable v6.1-based Pixel 8, older NOT...
Exploiting-a-Linux-kernel-vulnerability
Exploiting-a-Linux-kernel-vulnerability - IT19159140 Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same...
CVE-2024-28752
Apache CXF CVE-2024-28752 复现环境 漏洞公告：https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt 环境启动 samples/javafirstjaxwsfactorybean IDEA 通过 ServerStarter.java 启动 webservice 服务 构建 使用 JDK8 root@kitploit: mvn clean package java -jar target/cxf.jar 漏洞利用 使用 BurpSuite 发送如下请求即可触发。 root@kitploi...
sploitego
Sploitego - Maltego 的（本地）搭档 1.0 - 简介 Sploitego 是一个本地渗透测试转换包，它使用 Canari Framework 在 Maltego 中执行本地转换。该框架最初在 DEFCON 20 上推出，此后逐渐受到欢迎。 2.0 - 安装 Sploitego 2.1 - 支持的平台 Sploitego 目前已在 Mac OS X 和 Linux 上测试过。 2.2 - 依赖要求 Sploitego 仅支持 Python 2.6 版本。安装脚本会自动下载并安装大部分先决模块，但有些模块仍然需要手动安装。以下模块需要手动安装： Scapy 2.1.0...
cve-2025-5054
CVE-2025-5054 Vulnerability Detection Tool A Python tool to check if your Ubuntu system is vulnerable to CVE-2025-5054, a race condition in Apport that allows local information disclosure. This tool performs a series of checks to determine your system's status and provides recommendations if you...
SMBGhost-LPE-Metasploit-Module
SMBGhost-LPE-Metasploit-Module 这是一个针对CVE-2020-0796（又名SMBGhost）漏洞的实现，兼容Metasploit Framework。 注意事项： 此模块设计为在您拥有有效Shell时用于提升权限。 您可以更改有效载荷，如果您想使用自定义的DLL Shellcode，或者以某种方式对其进行编码。 可执行文件经过修改以规避检测，并使其能够运行并注入DLL Shellcode。 演示 致谢 感谢漏洞利用的作者 Daniel García Gutiérrez, Manuel Blanco Parajón。 同时感谢Spencer...
CVE-2025-32463_chwoot
CVE-2025-32463chwoot English document 声明：本脚本仅用于安全测试，请勿用于非法用途。 CVE-2025-32463 sudochwoot权限提升漏洞的验证脚本 介绍 Description 相比于互联网上其他POC，考虑到部分主机并没有安装gcc，缺少编译环境，所以此脚本兼容了两种场景： 主机安装了gcc，脚本会自动编译二进制文件并提权 主机没有安装gcc，脚本会调用编译好的二进制文件提权 使用 Usage 验证漏洞是否存在： root@kitploit: sudo -R woot woot 漏洞存在的结果： root@kitploit: sudo:...
CVE-2018-19320-LPE
CVE-2018-19320 LPE Exploit Description Local Privilege Escalation Exploit of CVE-2018-19320. The exploit uses the exposed functions in gdrv.sys that allow a low-level user to allocate and write data to memory for escalating the privileges to SYSTEM. ScreenShot Tested on: Windows 10 x64 21H1 OS...
CVE-2026-7574
🚨 CVE-2026-7574 — Claude Desktop Cowork VM Integrity Bypass Anthropic Claude Desktop Cowork VM Image Integrity Bypass 🔥 Local Persistence Through VM Image Tampering An integrity validation weakness allowing modification of the Claude Desktop Cowork VM filesystem image rootfs.img, enabling...
CVE-2021-34486
CVE-2021-34486 Windows Etw 本地权限提升 仅在 Windows 20H2 x64 上测试 ed2k://|file|cnwindows10businesseditionsversion20h2updatedmarch2021x64dvdca61aaaa.iso|6074574848|B6741C4E4B09337471B02DC95E953992|/ 感谢 @yongchuank https://www.pixiepointsecurity.com/blog/advisory-cve-2021-34486.html...