CopyFile_CVE-2026-31431

CopyFileCVE-2026-31431 Copy Fail CVE-2026-31431 – Local Privilege Escalation Exploit A logic bug in the Linux kernel’s authencesn AEAD template allows an unprivileged user to write 4 controlled bytes into the page cache of any readable file. The provided Python script corrupts /usr/bin/su in memo...

cve-2026-32746-mitigation

CVE-2026-32746: Advanced Linux Networking Mitigation Tool 🚨 TECHNICAL DISCLAIMER CVE-2026-32746 is a hypothetical vulnerability used for educational demonstrations. This tool addresses the "Perfect Storm" scenario: A memory-unsafe Telnet daemon telnetd combined with a race condition in privilege...

detect_CVE-2026-25177

detect-CVE-2026-25177 Production-safe scanner that detects exploitation of CVE-2026-25177 — the Active Directory SPN Unicode Collision vulnerability CVSS 8.8. This vulnerability allows any authenticated user with write-SPN permissions to escalate privileges to SYSTEM by injecting Unicode characte...

copy-fail-go

Copy Fail - CVE-2026-31431 - golang version ⚠️ WARNING: This program is highly dangerous and experimental. Manual cleanup is required to clear the exploit. Use at your own risk! Technical Writeup original repo run check /usr/bin/su before run: user@pc:$ hexdump -n 300 -x /usr/bin/su 0000000 457f...

CYBERDUDEBIVASH-5G-Core-Key-Rotation-Ghost-Admin-Auditor

CYBERDUDEBIVASH 5G Core Key Rotation & Ghost Admin Auditor v1.1 © 2026 CYBERDUDEBIVASH – All Rights Reserved Global Authority in Zero-Trust 5G & Private Network Security Bhubaneswar, Odisha, India Production-grade tool for detecting & remediating CVE-2026-0622 Ghost Admin privilege escalation &...

pwnkit-scanner

PwnKit Scanner Check CVE-2021-4034 vulnerability This test is not 100% reliable, but it helps with a quick scan. How to use Linux Debian based systems: wget https://raw.githubusercontent.com/codiobert/pwnkit-scanner/main/pwnkit-scanner-debian.sh -q -O - |bash How to use Linux Red Hat based system...

copy-fail-blocker

copy-fail-blocker BPF-LSM mitigation for CVE-2026-31431 "Copy Fail" and the RxRPC variant of Dirty Frag, and for similar privilege-escalation vulnerabilities that depend on userspace access to a kernel-side in-place crypto path reachable via the AFALG or AFRXRPC socket families. A small DaemonSet...

Linux_LPE_io_uring_CVE-2021-41073

LinuxLPEiouringCVE-2021-41073 LPE exploit for CVE-2021-41073 iouring type confusion vulnerability. Checkout the writeup Put an iouring on it: Exploiting the Linux Kernel. author: @chompie1337 For educational/research purposes only. Not for use on testing or security evaulations. To build requires...

Copy_Grail

copygrail | copy-fail-CVE-2026-31431 copygrail is a compact, single-file C++ implementation of the CVE-2026-31431 "Copy Fail" local privilege escalation vulnerability. It showcases a clean AFALG + splice page cache corruption technique that can be used to overwrite a setuid binary and escalate...

CVE-2026-36981-Kernel-EoP-PoC

CVE-2026-36981-Kernel-EoP-PoC Kernel write-what-where condition within the pwdrvio.sys kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation. 2026-02-09 Vendor notified 2026-03-05 Vendor acknowledged 2026-03-...

pkexec-lpe-poc

pkexec-lpe-poc POC for CVE-2021-4034 Original Writeup For ease of use, it accepts a C file payload instead of a hardcoded shell. usage: make ./poc payload.c tested on Ubuntu 20.04.3 LTS - Linux target 5.4.0-81-generic...

CVE-2021-29441

CVE-2021-29441 Usage: CVE-2021-29441.exe ip Alibaba Nacos unauthorized account addition...

CVE-2021-4034

CVE-2021-4034 A simple proof-of-concept for CVE-2021-4034 pkexec local privilege escalation. Based on the excellent summary by our friends at Qualsys. How do? 1. Clone this repository onto a machine with a vulnerable version of pkexec. 2. ./run.sh 3. Shenanigans...

Compiled-PoC-Binary-For-CVE-2023-28252

Compiled PoC Binary For CVE-2023-28252 The repo contains a precompiled binary which can be run on a Windows machine vulnerable to CVE-2023-28252 The precompiled binary is a slightly modified version of the PoC exploit seen in fortra's repo. The file can be run with the following arguments:...

CVE-2026-41651

CVE-2026-41651 — PackageKit TOCTOU Local Privilege Escalation Classification: Purple Team Assessment Artifact Authorized use only. This document and the accompanying test script are intended solely for internal security validation on systems where written authorization has been obtained. Proof of...

copyfail-go

CopyFail Go La maggior parte degli LPE su Linux necessitano di una finestra di race o di un offset specifico del kernel. Copy Fail è un difetto logico lineare — non necessita di nessuno dei due. Lo stesso script Python da 732 byte binario Go statico compromette ogni distribuzione Linux rilasciata...

freebsd-CVE-2026-7270

Ref https://github.com/califio/publications/tree/main/MADBugs/freebsd-CVE-2026-7270 CVE-2026-7270 FreeBSD local privilege escalation viaexecargsadjustargs OOB memmove An operator-precedence bug in execargsadjustargs sys/kern/kernexec.c, present since 2013 lets any local user escalate to root on a...

CVE-2021-4034-POC

CVE-2021-4034-POC POC for pwnkit vulnerability discovered by Qualys. Compile & execute: gcc lpe.c -o lpe; ./lpe Creates the following directory/file structure: /tmp ├── GCONVPATH=. │ └── test ├── payload.c ├── payload.so ├── test │ └── gconv-modules References...

CVE-2026-31431-C

Copy-Fail Exploit CVE-2026-31431 Local privilege escalation exploit targeting a Linux kernel copy-on-write vulnerability via AFALG sockets and splice operations. Overview This exploit abuses a kernel-level memory corruption condition in the Linux crypto subsystem AFALG combined with zero-copy...

CVE-2026-24061-PoC-Telnetd

CVE-2026-24061 Proof of Concept PoC ⚠️ DISCLAIMER: EDUCATIONAL PURPOSES ONLY ⚠️ This repository contains a Proof-of-Concept PoC exploit for CVE-2026-24061. It is intended strictly for educational purposes and for testing systems in a controlled lab environment. The author takes no responsibility...