CVE-2020-9484

CVE-2020-9484 Reference Authored by redtimmysec, masahiro331 https://packetstormsecurity.com/files/157924/CVE-2020-9484.tgz + I just analyzed 1-day exploit. then remodeled. Description Compared to the before PoC, it has the following advantages. + Environment Script for Ubuntu 18.04. + You can ed...

Ubuntu-GameOver-Lay

UbuntuP-GameOverLay Using CVE-2023-2640 CVE-2023-3262 to escalate previlege CVE 2023-2640 https://nvd.nist.gov/vuln/detail/CVE-2023-2640 On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overlayfs. xattrs", an unprivileged user may se...

CVE-2017-16995

The latest version of Ubuntu Ubuntu 16.04 has a high-risk local privilege escalation vulnerability, numbered CVE-2017-16995. This vulnerability exists in the Linux kernel system that calls eBPF bpf2. When a user provides a malicious BPF program, the eBPF verifier module generates a calculation...

CVE-2018-6065-exploit

Chrome V8 CVE-2018-6065 Exploit Analysis blog post: https://b1tg.github.io/post/cve-2018-6065-analysis git reset 0407506af3d9d7e2718be1d8759296165b218fcf --hard gclient sync -f tools/dev/v8gen.py x64.debug ninja -C out.gn/x64.debug tools/dev/v8gen.py x64.release ninja -C out.gn/x64.release Test o...

metasploitable3-pentest-writeup

Metasploitable3 — Penetration Test Report Author: Arlen Fortunato Date: September 2026 Environment: Parrot OS attacker → Metasploitable3 Ubuntu 14.04 target Scope: Full network penetration test — enumeration, exploitation, privesc, post-exploitation Type: Home Lab / Capture The Flag Practice ⚠️ Al...

gdbfuzz

GDBFuzz: Debugger-Driven Fuzzing This is the companion code for the paper: 'Fuzzing Embedded Systems using Debugger Interfaces'. A preprint of the paper can be found here https://publications.cispa.saarland/3950/. The code allows the users to reproduce and extend the results reported in the paper...

CVE-2021-3560

CVE-2021-3560 CTF a simple poc script for polkit PrivEsc vulnerability in ubunutu...

salt-shellshock

====================== shellshock bash update This recipe tries to upgrade bash from OS pkg, and falls back to compile bash on systems with no update available. Works for us on old ubuntu/debian. Bash install script from:...

PIL-CVE-2017-8291-study

PIL-CVE-2017-8291 White Hat School 3rd term, Class 13, Baek Seung-hoon @shun1403 https://github.com/shun1403/PIL-CVE-2017-8291.git Environment: Ubuntu Linux Environment Setup Upgrade to V2 via sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin If...

RootQuest-CTF-Box-Multi-Stage-Exploitation-VM

RootQuest CTF Box — Multi-Stage Exploitation VM 💀 Kalaichelvan Thieveshkar CB013248 · Staffordshire University · COMP50003 - Cyber Security II Overview RootQuest is a purpose-built CTF virtual machine that contains a 10-stage , sequential attack path spanning 5 security domains. Each challenge...

CVE-2021-3156-plus

CVE-2021-3156 This is a warehouse modification based on @CptGibbon and supports arbitrary command execution. 相关阅读：CVE-2021-3156 - Exploit修改 Root shell PoC for CVE-2021-3156 no bruteforce For educational purposes etc. Tested on : @CptGibbon Ubuntu 20.04 against sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 Al...

CVE-2023-1829

CVE-2023-1829 The exploitation is tested on Ubuntu22.04 official source code 5.15.0-25.25 Installing dependences for some netlink filter functions sudo apt install libnftnl-dev libmnl-dev Building step: make References https://github.com/randorisec/CVE-2022-34918-LPE-PoC/tree/main...

gameoverlay

Gameoverlay shell code for privilege escalation root on UBUNTU. Ubuntu: 23.04 22.10 22.04 not v5.15.0 20.04 v.5.4.0 for 32629 18.04 v.5.4.0 for 32629 run with ./overlay.sh...

CVE-2021-3493

CVE-2021-3493 — Ubuntu OverlayFS Local Privilege Escalation A working proof-of-concept for CVE-2021-3493 , a local privilege escalation vulnerability in the Ubuntu kernel's OverlayFS implementation. An unprivileged user can mount an overlay filesystem inside a user namespace and set arbitrary fil...

CVE-2023-2640-CVE-2023-32629-Interactive-PoC

CVE-2023-2640 & CVE-2023-32629 GameOverLay - Real Host Root Escape PoC An interactive, multi-step Local Privilege Escalation LPE Proof of Concept PoC targeting the Ubuntu Linux kernel OverlayFS vulnerabilities CVE-2023-2640 / CVE-2023-32629. Unlike standard automated one-liners that trap your...

CVE-2020-16125-Reproduction

CVE-2020-16125-Reproduction This repository is aimed at reproducing the attack . Description : Its original name is “Ubuntu gdm3 privilege escalation” , and it is found by a Github security researcher named Kevin Backhouse . Its CVSS score is 4.6/10 medium and the affected environment is Ubuntu...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...

CVE-2025-23266

CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...

nxlog-ubuntu-githubactions

nxlog-ubuntu-githubactions nxlog ubuntu...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it did no...