Exploit for CVE-2026-98432

CVE-2026-98432 lab root-shell kit This kit builds a deliber...

CVE-2026-24061

🚨 CVE-2026-24061 — “TelneTD” Critical Remote Authentication Bypass in GNU Inetutils telnetd The ghost of 2015 just came back to own everything still running telnet. Zero authentication. One environment variable. Instant root shell. ⚠️ Overview CVE-2026-24061 is a critical remote privilege...

traitor

Traitor Automatically exploit low-hanging fruit to pop a root shell. Linux privilege escalation made easy! Traitor packages up a bunch of methods to exploit local misconfigurations and vulnerabilities in order to pop a root shell: Nearly all of GTFOBins Writeable docker.sock CVE-2022-0847 Dirty...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

DblTekGoIPPwn

DblTekGoIPPwn Tool to exploit challenge response system in vulnerable DblTek GoIP devices. Can generate responses to specified challenges, test hosts for the vulnerability, run commands on vulnerable hosts, send SMS messages from a host, and drop into a root shell on any vulnerable host. The...

cve-2025-32433

Build » git clone https://github.com/0xPThree/cve-2025-32433.git && cd cve-2025-32433 » docker build -t erlang-ssh . » docker run -d --name erlang-ssh -p 2222:2222 erlang-ssh POC kdev :: /erlang/CVE-2025-32433 ‹main› » python3 cve-2025-32433.py -h usage: cve-2025-32433.py -h -d --host HOST --port...

paradoxiaRAT

Paradoxia Remote Access Tool. Are you looking for a GUI alternative? Check outRemote Hacker Probe. More Advanced and Stable with ton of features. Features Paradoxia Console Feature| Description ---|--- Easy to use| Paradoxia is extremely easy to use, So far the easiest rat! Root Shell| - Automati...

CVE-2019-8781-macOS

CVE-2019-8781 Security Advisory CVE-2019-8781 POC Details The POC elevate the process to root and execute a shell. Exploit environment - macOS 10.14.6 18G95 Should works on all macOS version that's released before 10.15.0 - SMEP: On - SMAP: Off - Kernel ASLR slide passed to the argv1 Building You...

docker-POC_CVE-2024-1086

https://github.com/Notselwyn/CVE-2024-1086 usage docker compose up -d --build docker exec -it poccve20241086 bash test sample tester@e23a4e5757d9 CVE-2024-1086$ id uid=99999tester gid=99999tester groups=99999tester tester@e23a4e5757d9 CVE-2024-1086$ cat /etc/shadow cat: /etc/shadow: Permission...

CVE-2026-41567

CVE-2026-41567 1day One day for Docker Escape CVE-2026-41567. It is a demonstration of docker escape using trojanized xz / unpigz. It can be easily modified to be used remotely i.e. just modify the docker default IP with a remote C2. More information on the exploit here PoC Run a netcat listening...

CVE-2026-31431

Description: Cfail is my implementation in C++ x86-64 Assembly of CVE-2026-31431 aka Copyfail, with no dependecy required at all, included libc. In fact, you obtain am universal executable able to run stand-alone on every Linux x86-64 distribution, thanks to a minimal implementation of the standa...

CVE-2021-44731-snap-confine-SUID

CVE-2021-44731-snap-confine-SUID Local Privilege Escalation Exploit for CVE-2021-44731, snap-confine 2.54.2 and lower All credit to Qualys for finding this and providing a detailed exploit. https://www.qualys.com/2022/02/17/cve-2021-44731/oh-snap-more-lemmings.txt Quick and Dirty snap-confine LPE...

CVE-2021-3156

Baron Samedit - Sudo CVE 2021-3156 PoC Written in BASH and C. Written by: TheFlash2k/Ali Taqi Wajid Usage: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...

CVE-2011-2523

CVE-2011-2523 — vsFTPd 2.3.4 Backdoor Exploit This repository contains a Python-based exploit targeting a maliciously backdoored version of vsFTPd 2.3.4. Unlike traditional vulnerabilities, this backdoor was introduced by an unauthorized modification of the official binary hosted on the vsFTPd si...

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

CVE-2025-32463_chwoot

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. This vulnerability is reported by Rich Mirch @0xm1rch on X @ Stratascale. Original post: Vulnerability...

sudo-exploit

Usage Note: The libnssX directory must be present in the present working directory while running the exploit ubuntu 18.04 ubuntu 20.04...

ez-pwnkit

ez-pwnkit A pure-Go implementation of the CVE-2021-4034 PwnKit exploit. The exploit use syscall.ForkExec to survive end of main program. Installation git clone https://github.com/OXDBXKXO/ez-pwnkit.git cd ez-pwnkit make As the exploit relies on a malicious shared library, a PWN.so file is generat...

PwnTillDawn-Portal-Walkthrough

🔐 Vulnerability Assessment & Penetration Testing VAPT 📌 Project: Target Exploitation Walkthrough ⚠️ This project is for educational and authorized testing purposes only. Unauthorized access to systems is strictly prohibited. 👨‍💻 Author SYAFIQ Role: Lead Penetration Tester 🎯 Target Information...

CVE-2025-32463_POC

CVE-2025-32463 – sudo chroot "chwoot" PoC This repository provides a minimal, reproducible environment to demonstrate the CVE‑2025‑32463 privilege‑escalation flaw in sudo’s chroot feature. Contents File| Purpose ---|--- Dockerfile| Builds an Ubuntu 24.04 image with vulnerable sudo 1.9.16p2 and...