Security Notice: This repository contains working exploit code for educational and research purposes. Use responsibly and only on systems you own or have explicit permission to test.

CVE-2023-4911 Exploit (Looney Tunables)

Optimized, multi-processing exploits for CVE-2023-4911 targeting x86_64 and aarch64 architectures.

Architectures

• aarch64/ — Exploit for AArch64 systems
• x86_64/ — Exploit for x86_64 systems

Key Differences

Common Features

• Monolithic design: All logic (libc patching, env preparation, brute-forcing) integrated into a single C binary. No external Python scripts required.
• Multi-processing brute-forcing using all CPU cores
• Dynamic calibration based on system performance
• Custom ELF parser (mmap-based, uses .dynsym)
• Fail-fast vulnerability check
• Real-time statistics tracking
• Core dump suppression
• Stack size unlimited configuration

References

• Qualys Advisory: Looney Tunables Local Privilege Escalation
• NVD: CVE-2023-4911

Credits

Base exploit structure, environment layout, and libc patching logic:

• Xion (KAIST Hacking Lab): Original PoC (leesh3288/CVE-2023-4911)
• Beatriz Fresno Naumova: Refined C implementation (EDB-ID: 52479)
• blasty: AArch64 exploit implementation (gnu-acme.py)

This implementation is based on the above works, with the following additions:

• Multi-processing brute-forcing using all CPU cores
• Dynamic calibration based on system performance
• Improved ELF parser (mmap-based, uses .dynsym)
• Fail-fast vulnerability check
• Custom shellcode (setreuid/setresuid)
• Real-time statistics tracking
• Core dump suppression
• Stack size unlimited configuration

Optimizations by: Anastasia Shebalkina <jarpex>

Disclaimer

This source code is provided for educational and security research purposes only. It demonstrates the mechanics of a known, patched vulnerability (CVE-2023-4911). Unauthorized access to computer systems is illegal. The author is not responsible for any misuse of this code.