tpwn-bis

tpwn-bis simple poc for cve-2015-5932 / cve-2015-5847 / cve-2015-5864 now escalates to root and spawns a shell. a big thanks to @qwertyoruiop for original code and help!...

CVE-2024-22274

CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...

CVE-2025-32463-Chwoot-POC

CVE-2025-32463 Sudo EoP Exploit PoC Rust Using Prebuild Binary 1. Clone the repository and run the binary in the target machine. git clone https://github.com/krypton-0x00/CVE-2025-32463-Chwoot-POC.git cd CVE-2025-32463-Chwoot-POC ./exploit Build From Source 1. Clone the repository if not done...

root-exploit-pixel3

Root Exploit for Pixel 3 Family This folder contains a local privilege escalation exploit, a modification of the bluefrostsecurity PoC for CVE-2020-0041. The exploit disables SELinux and then launches a root shell. The exploit was provided with hardcoded offsets for a Pixel 3 device running the...

CVE-2021-3156

Baron Samedit - Sudo CVE 2021-3156 PoC Written in BASH and C. Written by: TheFlash2k/Ali Taqi Wajid Usage: This would spawn a root shell directly if the sudo is vulnerable. $ make $ ./exploit...

Nagios-CVE-2019-15949-RCE

Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15949 Overview A vulnerability exists in Nagios XI = 5.6.5 allowing an attacker to leverage an RCE to escalate privileges to root. The exploit requires access to the server as the 'nagios' user, or CCM access via the web interface with...

CVE-2021-3156

CVE-2021-3156 Introduction This repository was created for studying purpose. The project contains some tools for studying the sudo Baron Samedit vulnerability and the exploit for it. Thanks to Qualys Team for discovering such vulnerability, to Worawit and 0xdevil for the interesting writeups. Usa...

cve-2025-32463-lab

CVE-2025-32463 – Sudo chroot Local Privilege Escalation Lab This repository contains a Docker-based lab and proof-of-concept exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 to 1.9.17. 🚨 Disclaimer This code is for educational and authorized testing...

CVE_2022_0847

CVE20220847 CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability POC A Simple Proof of concept to get root shell. $ gcc cve20220847.c -o exploit $ ./exploit /etc/passwd 1 ootz: $ su rootz id uid=0root gid=0root groups=0root...

NimbusPWN-CVE-2022-29799-29800

NimbusPwn — networkd-dispatcher !NOTE Other distros: dnf install gcc dbus-devel pkgconf Fedora/RHEL or pacman -S gcc dbus pkgconf Arch...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

CVE-2024-48990-Exploit

CVE-2024-48990 Exploit My full writeup for how I came to re-discovering this N-day and creating my own exploit for it can be found on my blog. Essentially, you can git clone this repository into an attacker-controlled directory, export PYTHONPATH=, and then run main.py with that PYTHONPATH value...

CVE-2025-6019

CVE-2025-6019 Proof of Concept PoC This repository contains a Proof of Concept PoC script for CVE-2025-6019 , a Local Privilege Escalation LPE vulnerability in libblockdev and udisks. The script creates an XFS filesystem image with an SUID bash binary and exploits the vulnerability to mount it...

RancidCrisco

RancidCrisco Minimum Viable PoC for CVE-2023-20126 This is the initial release. It works, but its the 'simplest case' exploit. Tested and working on SPA112/SPA122 - SPA232D requires a different firmware image. Gives a root-shell on port 23000/tcp. I still need to clean up the toolchain used for...

sudo-exploit

Usage Note: The libnssX directory must be present in the present working directory while running the exploit ubuntu 18.04 ubuntu 20.04...

DirtyPipe-BSI

Dirty...What? This is Max Kellermann's proof of concept for Dirty Pipe, but modified to overwrite the root password field in /etc/passwd and restore it after obtaining a root shell. Note: I claim no credit for finding this vulnerability or writing the proof of concept. This exploit is simply a...

nfsen-exploit

nfsen-exploit Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7. Tested on Ubuntu, probably works on everything Vulnerability discovered by Paul Taylor/Foregenix Ltd Usage: python exploit.py This generates a root-level shell on the remote machine...

DirtyPipePython

dirty.py Description This is an exploit for the Linux kernel vulnerability CVE-2022-0847 DirtyPipe discovered by Max Kellerman. This code combines two existing DirtyPipe POC's into one: febinrev Overwrites sudo binary to directly pop a root shell eremus-dev A direct copy of Kellerman's POC into...

CVE-2026-24061-PoC-Exploit

CVE-2026-24061 - GNU inetutils-telnetd 認証バイパスエクスプロイト GNU inetutils-telnetd エディション - CRLF インジェクションによる認証バイパスと即時 root シェル -概要 このエクスプロイトは、GNU inetutils-telnetd における重大なリモート認証バイパス脆弱性 CVE-2026-24061 を悪用します。USER='-f root' を含む細工された NEWENVIRON ペイロードを注入することで、認証をバイパスし、資格情報なしで即座に root シェルを取得します。 注記:...

DblTekGoIPPwn

DblTekGoIPPwn Tool to exploit challenge response system in vulnerable DblTek GoIP devices. Can generate responses to specified challenges, test hosts for the vulnerability, run commands on vulnerable hosts, send SMS messages from a host, and drop into a root shell on any vulnerable host. The...