CVE-2023-0386

README root@kitploit: gcc -Wall exp.c pkg-config fuse --cflags --libs -o exp ./exp /tmp Vulnerability Analysis The theoretical knowledge in this article namespaces, overlay filesystem, fuse filesystem, etc. comes from ChatGPT. Vulnerability Overview Vulnerability ID: CVE-2023-0386 Vulnerable...

io_uring_LPE-CVE-2024-0582

iouringLPE-CVE-2024-0582 LPE exploit for CVE-2024-0582. I will not be releasing a write-up for this vulnerability as my method of exploitation is almost the same as for CVE-2023-2598. You can read the exploitation section of my write-up on CVE-2023-2598 to understand this exploit as well:...

io_uring_LPE-CVE-2023-2598

iouringLPE-CVE-2023-2598 LPE exploit for CVE-2023-2598. My write-up of the vulnerability: Conquering the memory through iouring - Analysis of CVE-2023-2598 You can compile the exploit with root@kitploit: gcc exploit.c -luring -o exploit Disclaimer For educational and research purposes only. Use a...

letsdefend-cve-2024-49138-investigation

LetsDefend Investigation: CVE-2024-49138 🔍 Overview Hands-on SOC investigation and incident response simulation using LetsDefend, focused on a real-world exploitation of CVE-2024-49138 — a privilege escalation vulnerability in Windows CLFS driver. 📅 Event Details Event ID : 313 Incident Type :...

CVE-2019-13272-Local-Privilege-Escalation

This repository does not have a README...

OverlayFS-CVE-2021-3493

OverlayFS — CVE-2021–3493 || Writeup || Tryhackme 📖 Introduction What is OverlayFS.? OverlayFS is a Linux kernel module that allows the system to combine several mount points into one, so that you can access all the files from each within one directory structure. It’s often used by live USBs, or...

CVE-2023-24871

CVE-2023-24871 This repository contains materials related to CVE-2023-24871, which I covered in this series of posts. You'll find more info inside the specific folders, since the vulnerability allowed both RCE & LPE...

CVE-2021-3156

CVE-2021-3156 Ansible role patches CVE-2021-3156 for CentOS Intro Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character CVE-2021-3156 News RU RUN root@kitploit:...

Ubuntu-LPE

This repository does not have a README...

CVE-2022-1015

CVE-2022-1015 This repository contains a PoC for local privilege escalation of CVE-2022-1015, a bug in the nftables component of the linux kernel that I found. You can read a detailed analysis of this vulnerability and the exploitation strategy over at my blog. Right now, the exploit is a bit...

CVE-2024-23700-C2-Server

CVE-2024-23700 - C2 Server: Command and Control and Data Collection Server This project illustrates the design and construction of a Command & Control C2 server used for the experimental exploitation scenario of the privilege escalation vulnerability CVE-2024-23700. This server is responsible for...

CVE-2024-49138-SOC-Investigation

CVE-2024-49138 Exploitation Investigation Platform: LetsDefend SOC Training Environment Alert: SOC335 - CVE-2024-49138 Exploitation Detected Category: Privilege Escalation | Malware Analysis | Incident Response Status: Investigation Completed ✅ Overview In this investigation, I worked on an alert...

CVE-2022-21882

CVE-2022-21882 win32k LPE bypass CVE-2021-1732 Test only tested on windows 20h2 19042.1415 tested on windows 21H1 not working Download https://raw.githubusercontent.com/David-Honisch/CVE-2022-21882/main/x64/Release/CVE-2021-1732.exe Many thanks to Kalendski. Based on:...

CVE-2020-0753-and-CVE-2020-0754

Writeup and POC for CVE-2020-0753, CVE-2020-0754 and six unfixed Window DOS Vulnerabilities Exploit FileSystem race condition bug - analysis of CVE-2020-0753 and CVE-2020-0754 Windows Error Reporting service has fixed 2 Elevation of Privilege bugs in last Patch Tuesday, the two bugs are assigned...

CVE-2025-61229

CVE-2025-61229 Description From the developer's blog: User-settable Before/After shell scripts run escalated, with SuperDuper's TCC Full Disk Access permissions. Since those shell scripts are referenced by the settings files for the copy or schedule, a malicious actor could modify those settings ...

CVE-2023-38041-POC

CVE-2023-38041-POC Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 Copy Fail CVE-2026-31431 – Local Privilege Escalation Exploit A logic bug in the Linux kernel’s authencesn AEAD template allows an unprivileged user to write 4 controlled bytes into the page cache of any readable file. The provided Python script corrupts /usr/bin/su in memo...

CVE-2019-8781-macOS

CVE-2019-8781 Security Advisory CVE-2019-8781 POC Details The POC elevate the process to root and execute a shell. Exploit environment root@kitploit: - macOS 10.14.6 18G95 Should works on all macOS version that's released before 10.15.0 - SMEP: On - SMAP: Off - Kernel ASLR slide passed to the arg...

CVE-2024-0582

RU GenIoURingExploit is a PoC exploit targeting a specific vulnerability in the Linux kernel CVE-2024-0582. The PoC leverages the iouring mechanism to gain unintended access and potentially escalate privileges by manipulating socket buffers and triggering certain kernel behaviors. Features Utiliz...