Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group GTIG in September 2026...

AutomatedRoot

AutomatedRoot Root MediaTek devices using mtk-su exploit CVE-2020-0069. Requirements Python 3.9 or newerin %PATH% for Windows. ADB in %PATH% for Windows. The CVE-2020-0069 PoC mtk-su. Usage Download the mtk-su binaries from the MediaTek's SU XDA page and move them to their corresponding folders...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

otseca

Open source security auditing tool to search and dump system configuration. Introduction | Description | Requirements | Output | Parameters | Reports | How it works | Other Introduction The main goal The main assumption of creating this tool was easier and faster delivery of commands sets to be...

Magisk

This is not an officially supported Google product Introduction Magisk is a suite of open source software for customizing Android, supporting devices higher than Android 6.0. Some highlight features: MagiskSU : Provide root access for applications Magisk Modules : Modify read-only partitions by...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

Make-and-Break

Make-and-Break Create and exploit a vulnerable Virtual Machine Description: Built a custom Virtual Machine, running Ubuntu 18.04.1 and Webmin 1.810. Using CVE-2019-15107 to exploit a backdoor in the Linux System Administration Interface PROOF of CONCEPT --- Linux OS Ubuntu 18.04.1 will be deploye...

mimipenguin

MimiPenguin 2.0 A tool to dump the login password from the current linux desktop user. Adapted from the idea behind the popular Windows tool mimikatz. This was assigned CVE-2018-20781 https://vulners.com/cve/CVE-2018-20781. Fun fact it's still not fixed after GNOME Keyring 3.27.2 and still works ...

CVE-2021-4034

CVE-2021-4034 $ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o cve-2021-4034 echo "module UTF-8// PWNKIT// pwnkit 1" gconv-modules mkdir -p GCONVPATH=. cp /usr/bin/true GCONVPATH=./pwnkit.so:. $ ./cve-2021-4034 whoami root exit...

CVE-2015-1318

CVE-2015-1318 Exploit I used to claim 10% final-grade extra credit in Matthew Might's Compilers class. https://bugs.launchpad.net/apport/+bug/1438758 Bonus opportunities http://matt.might.net/teaching/compilers/spring-2015/ Use an exploit on vulcan to gain root access: +10% for a local user...

CVE-2025-32463

CVE-2025-32463 检测框架 一个全面的安全监控与检测框架，专为识别针对 sudo chroot 权限提升漏洞（CVE-2025-32463）的利用尝试而设计。本项目展示了先进的威胁检测方法、应急响应能力及防御性安全工程。 🔍 概述 CVE-2025-32463 是 sudo 1.9.14 至 1.9.17 版本中的一个关键权限提升漏洞，允许本地用户通过操纵 /etc/nsswitch.conf 并在使用 --chroot 选项时获取 root 权限。此框架为安全运营团队提供了实时检测能力与取证分析工具。 CVSS 评分： 9.3（严重） CWE 分类：...

Dirty-Frag-CVE-2026-43284

DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...

CVE-2025-32463

CVE-2025-32463 Exploit Overview This repository provides a Go-based exploit tool for CVE-2025-32463 , a critical local privilege escalation vulnerability CVSS 9.3 in sudo versions 1.9.14 to 1.9.17. It allows unauthorized local users to gain root access by exploiting a flaw in the --chroot -R...

CVE-2018-1207-better

CVE-2018-1207 漏洞利用 PoC：Dell iDRAC7/iDRAC8 RCE（反向 Shell） 本仓库包含一个概念验证 Python 脚本，用于演示 iDRAC7 和 iDRAC8 设备（固件版本 2.52.52.52 及更早版本）中存在的远程代码执行漏洞。该漏洞允许攻击者以 root 用户身份运行代码，可能导致系统完全被接管。在代码中，我们通过利用该漏洞执行反向 shell 攻击来展示这一点。本仓库中的代码是对 Michael Gargiullo mgargiullo 原始漏洞利用代码的编辑版本。 免责声明 -...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ 此工具仅用于教育目的。严禁在受控环境之外未经授权使用。 CVE-2026-24061 是 GNU Inetutils（版本 1.9.3–2.7）中 telnetd 存在的一个严重漏洞（CVSS 9.8），允许远程攻击者通过 USER 环境变量传递 -f root，绕过身份验证并获得 root 访问权限。此工具旨在模拟对该漏洞的滥用。 系统要求 Windows 操作系统/Linux Python 3.4+ 使用方法 本 PoC 需要一个目标主机地址。提供方式有两种： 1. 编辑 payload.txt 文件 将你的 payload 插入...

nexmon

What is nexmon? Nexmon is our C-based firmware patching framework for Broadcom/Cypress WiFi chips that enables you to write your own firmware patches, for example, to enable monitor mode with radiotap headers and frame injection. Below, you find an overview what is possible with nexmon. This...

CVE-2025-32463

CVE-2025-32463 Linux 中通过 Sudo chroot 实现的本地权限提升至 Root 🛑 漏洞摘要 CVE-2025-32463 是 Sudo 二进制文件中的一个本地权限提升漏洞 。该漏洞允许本地用户在特定配置错误或精心构造的输入下将权限提升至 root 。该问题由 Rich Mirch 发现。 CVE-ID: CVE-2025-32463 组件: sudo 类型: 本地权限提升（EoP） CVSS 评分: 待定 发现者: Rich Mirch 🔥 影响 低权限的攻击者可以利用此漏洞获取 root 访问权限 ，从而完全控制系统。 🧪 概念验证 漏洞利用 git clo...

initroot

Explotando CVE-2016-10277 Más información en: https://alephsecurity.com/2017/06/07/initroot-moto/ Si solo quieres comprobar si tu dispositivo es vulnerable, puede ser más rápido si flasheas el ramdisk de stock sin modificaciones. Si es tu caso, busca initroot--STOCK.cpio.gz. Motorola XT-1033...

CVE-2025-49173

CVE-2025-49173 — macOS 10.9 Local Root Privilege Escalation Research Status: Unofficial / Research-Based Platform: macOS Mavericks 10.9 Impact: Local Privilege Escalation → Root Severity: High Local This repository contains a proof-of-concept PoC security research project focused on a local root...

network-security-lab

🔬 Network Security Lab A controlled virtual environment simulating real-world attack and defense scenarios 📋 Overview This lab simulates a real-world penetration test and defensive hardening exercise in a fully isolated virtual environment. It demonstrates the full offensive security lifecycle —...