Magisk

Este no es un producto compatible oficialmente por Google Introducción Magisk es un conjunto de software de código abierto para personalizar Android, compatible con dispositivos superiores a Android 6.0. Algunas características destacadas: MagiskSU : Proporciona acceso root para aplicaciones Magi...

CVE-2019-10149-Exim4-RCE

Cr.Exim 4.87 - 4.91 - Local Privilege Escalation Cr.Link: https://www.exploit-db.com/exploits/46996 1.This method requires you to first access the target machine with standard user privileges. 2.Once you have accessed the target machine, create a script file with the following content: vi raptor....

internalblue

Broadcom chips are used in approximately a billion of devices, such as all iPhones , MacBooks , the Samsung Galaxy S series, the older Google Nexus series, older Thinkpads , Raspberry Pis , various IoT devices, and more. In 2016, Cypress acquired the IoT division of Broadcom. Since then, firmware...

Dutch Institute for Vulnerability Disclosure Breached via Zammad 0-Days

Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access...

overlayFS-CVE-2021-3493

overlayFS CVE-2021-3493 OverlayFs OverlayFS es un módulo del kernel de Linux que permite al sistema combinar varios puntos de montaje en uno, para que pueda acceder a todos los archivos de cada uno dentro de una estructura de directorio. Sobre la vulnerabilidad Hace poco SSD-Discloure lanzó un Po...

CVE-2024-24402

Vulnerability Report CVE Disovered by: Jarod Jaslow MAWK Vulnerability Details: Endpoint: Nagios XI Version 2024R1.01 Vulnerability Type: Privilege Escalation from User "NAGIOS" Exploitation Result: Full root access on the target system Steps to Reproduce: 1. Create a Fresh Instance of Nagios XI...

sudo-snooper

sudo-snooper sudo-snooper acts like the original sudo binary to fool users into entering their passwords. It will show a fake prompt just like the original to the user to enter their sudo password. This can be useful in penetration tests or security evaluations for testing user knowledge...

Metasploitable2-VAPT-Report

VAPT Report: Metasploitable 2 System Compromise Project Overview This repository contains a comprehensive Vulnerability Assessment and Penetration Testing VAPT report for the Metasploitable 2 vulnerable environment. The assessment follows the standard 5-phase ethical hacking methodology,...

CVE-2024-6387-how-to-fix

CVE-2024-6387-how-to-fix Vulnerability remediation and mitigationCVE-2024-6387 CVE-2024-6387: Critical RCE Vulnerability in OpenSSH 'regreSSHion' My LinkedIn article CVE Details Description Qualys Threat Research Unit TRU has detailed a severe security flaw named 'regreSSHion' that leaves million...

CVE-2026-41940

CVE-2026-41940: cPanel/WHM Authentication Bypass Single & Multi-Target Disclaimer: This document and the associated script exploit.py are provided strictly for educational purposes, security research, and authorized penetration testing. Do not use this software against systems you do not own or d...

dirtycow-lab

dirtycow-lab Explotación vulnerabilidad Dirty COW CVE-2016-5195 en Ubuntu 16.04.1. cat README.md :/. 4. Ejecución y escalada : chmod +x /dirty && /dirty → su root pass dirtyCowFun. 5. Flag : cat /root/flag.txt → 4GEEKSY0uG0tR00t. ✅ Resultado root@ubuntu:/home/student whoami root...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...

CVE-2021-4034

CVE-2021-4034 pkexec El uso de este script en python aprovecha la vulnerabilidad en el archivo pkexec para ganar acceso a root sin proporcionar credenciales · Detecta si el binario tiene los privilegios SUID, en este caso es vulnerable usuario@gatogamer $ ls -la /usr/bin/pkexec .rwsr-xr-x 1 root...

Make-and-Break

Make-and-Break Crear y explotar una Máquina Virtual vulnerable Descripción: Construí una máquina virtual personalizada, ejecutando Ubuntu 18.04.1 y Webmin 1.810. Usando CVE-2019-15107 para explotar una puerta trasera en la Interfaz de Administración del Sistema Linux PRUEBA DE CONCEPTO --- Se...

CVE-2021-22555

CVE-2021-22555 Este repositorio aloja el exploit de escalada de privilegios en Linux de TUKRU CVE-2021-22555. Demuestra cómo obtener privilegios de root a través de una vulnerabilidad. Probado en Ubuntu 5.8.0-48-generic y COS 5.4.89+. Úsalo de manera responsable y ética. CVE-2021-22555: Exploit d...

CVE-2026-24061

CVE-2026-24061-PoC ⚠ Esta herramienta se crea únicamente con fines educativos. El uso no autorizado fuera de entornos controlados está estrictamente prohibido. CVE-2026-24061 es una vulnerabilidad crítica CVSS 9.8 en telnetd de GNU Inetutils versiones 1.9.3–2.7 que permite a un atacante remoto...

lxd-group-privesc-report

LXD Root Local Privilege Escalation to root via default lxd group membership and the lxd-installer package on Ubuntu. Demo runs on AWS EC2 Ubuntu Server 26.04 The bug is that Ubuntu Server 26.04's default install silently grants the primary user membership in the lxd group, a group that by LXD's...

osueta

/ \ / / | || | | | ' / - ' \ \ \ | /| ./||||//||| || | | | | | | | | | || -/ - '| | || ' \ || | ' / - '/ | | / \ ' \ ///|| ||||,||||| ,||/||| | /| || | | | | | | | ' | | ' / | / \ | / / | / / || ||||||||, | // \|\,|\ |/ ¿Qué es OSUETA? Osueta es un script simple de Python2 para...

CVE-2026-41940-PoC-Exploit

🚀 CVE-2026-41940 - cPanel/WHM Authentication Bypass Exploit cPanel & WHM Edition - CRLF Injection to Authentication Bypass & Full Session Hijacking 📌 Overview This exploit leverages CVE-2026-41940 , a critical authentication bypass vulnerability in cPanel/WHM. By injecting a crafted CRLF payload...

Privilege-escalation-MitraStar

Privilege-escalation-MitraStar-Router-GPT-2541GNAC-N1 CVE-2021-42165 Privilege escalation vulnerability on MitraStar routers Device: Mitrastar GPT-2541GNAC-N1 Firmware: BRg3.5100VNZ0b33 not tested in other version Exploit: Mitrastar GPT-2541GNAC-N1 devices are provided with access through ssh int...