dlinject

dlinject.py Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage root@kitploit: .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

CVE-2025-32463

README - sudo-chwoot.sh Description This script is a proof of concept PoC that demonstrates a privilege escalation technique exploiting a theoretical vulnerability in 'sudo' e.g. CVE-2025-32463. The PoC forces 'sudo' to load a manipulated .so library by leveraging the '-R' chroot functionality an...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 纯（无依赖）共享库（.so） 已使用“Reflective SO injection”进行测试。这是一种库注入技术，通过反射式编程的概念，将库从内存加载到宿主进程中。 https://github.com/infosecguerrilla/ReflectiveSOInjection 反射式 ELF SO 注入（Linux x8664） 下载并编译注入器 root@kitploit: git clone https://github.com/infosecguerrilla/ReflectiveSOInjection cd...

POC-IngressNightmare-CVE-2025-1974

POC of IngressNightmare CVE-2025-1974 Developed from: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Talk is cheap, just look at the code. Detailed can be found at https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Usage 1...

linux_injector

linuxinjector 一个适用于 x64 Linux 的简易无 ptrace 共享库注入器。 用法 linuxinjector mode（模式） 1. 常规 dlopen 2. memfd + dlopen（用于注入容器） 3. 原始 shellcode pid 目标进程 ID。必须拥有对该进程的 ptrace 权限（访问 /proc/$pid/mem 时需要）。不会对其使用 ptrace，因此其他进程可以自由地 ptrace 该目标进程。 file 模式 1：要注入的模块，将在远程进程中被 dlopen。最好使用完整路径，否则远程进程会使用其自身的 LDLIBRARYPATH...

CVE-2021-34398

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of confidentiality and integrity, and complete denial of...

CVE-2021-34398

CVE-2021-34398 affects NVIDIA DCGM (all versions before 2.2.9) with a vulnerability in the DIAG module that allows a user to inject shared libraries into the DCGM server, which typically runs with root privileges. This can lead to privilege escalation, complete loss of confidentiality and integri...

IBM DB2 - Shared Library Injection

source: https://www.securityfocus.com/bid/8346/info IBM DB2 ships with a number of shared libraries, stored in a directory owned by the user and group 'bin'. As setuid root utilities are linked to these libraries, their ownership by a user and group of a lower privilege level constitutes a...