CVE-2025-32463

README - sudo-chwoot.sh Description Ce script est une preuve de concept PoC qui démontre une technique d'élévation de privilèges exploitant une vulnérabilité théorique dans 'sudo' ex. CVE-2025-32463. Le PoC force 'sudo' à charger une bibliothèque .so manipulée en exploitant la fonctionnalité '-R'...

dlinject

dlinject.py Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage root@kitploit: .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

nasm_linux_x86_64_pure_sharedlib

NASM Linux x8664 чистая без зависимостей разделяемая библиотека .so Протестировано с «Reflective SO injection». Техника инъекции библиотек, в которой используется концепция рефлексивного программирования для загрузки библиотеки из памяти в процесс-хост...

POC-IngressNightmare-CVE-2025-1974

POC эксплойта IngressNightmare CVE-2025-1974 Разработано на основе: https://github.com/yoshino-s/CVE-2025-1974 https://www.wiz.io/blog/ingress-nginx-kubernetes-vulnerabilities Слова дешёвы, просто смотрите код. Подробности можно найти на...

linux_injector

linuxinjector Un semplice iniettore di librerie condivise senza ptrace per Linux x64. Uso linuxinjector modalità 1. dlopen normale 2. memfd + dlopen per l'iniezione in container 3. shellcode grezzo pid ID del processo target. È necessario avere i diritti ptrace su di esso richiesto per accedere a...

CVE-2021-34398

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of confidentiality and integrity, and complete denial of...

CVE-2021-34398

CVE-2021-34398 affects NVIDIA DCGM (all versions before 2.2.9) with a vulnerability in the DIAG module that allows a user to inject shared libraries into the DCGM server, which typically runs with root privileges. This can lead to privilege escalation, complete loss of confidentiality and integri...

IBM DB2 - Shared Library Injection

source: https://www.securityfocus.com/bid/8346/info IBM DB2 ships with a number of shared libraries, stored in a directory owned by the user and group 'bin'. As setuid root utilities are linked to these libraries, their ownership by a user and group of a lower privilege level constitutes a...