Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-46333 — Research on `pidfd_getfd(2)`-based file descriptor leakage from privileged SUID processes. Demonstrates race-condition FD capture against OpenSSH `ssh-keysign` and exposure of sensitive root-owned file handles. | Kitploit
Tools/GitHubGitHub/studiogangster/cve-2026-46333
Privilege EscalationVulnerability AnalysisExploitationLearning & EducationBinary Exploitation
GitHubstudiogangster/cve-2026-46333

CVE-2026-46333

Research on `pidfd_getfd(2)`-based file descriptor leakage from privileged SUID processes. Demonstrates race-condition FD capture against OpenSSH `ssh-keysign` and exposure of sensitive root-owned file handles.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
6333 months agoNot yet reviewed

CVE-2026-46333

Research and educational repository for CVE-2026-46333, focused on reproducible analysis and a safe test PoC workflow.

1) CVE-2026-46333

This project documents the vulnerability behavior, test setup, and validation approach so researchers and defenders can reproduce findings responsibly.

2) Safe Test PoC

This repository is intended for authorized, local, and controlled testing only.

  • Use only on systems you own or have explicit permission to test.
  • Do not run against production systems.
  • Keep tests isolated (VM/container/lab host).
  • Capture and share only non-sensitive outputs.

Safe PoC notes are in docs/SAFE_TEST_POC.md.

3) About Project

Project background, goals, and roadmap are in docs/ABOUT.md.

Quick Start

root@kitploit:~
go mod tidy
go build -o poc-test .
./poc-test <target-binary> [arg1 arg2 ...] [optional_file_to_capture]

Note: runtime execution is Linux-only because the PoC uses pidfd_* syscalls.
On non-Linux hosts, running ./poc-test intentionally exits with: this PoC is Linux-only at runtime. Build with GOOS=linux to generate a Linux executable.

Cross-Platform Build (Target: Linux)

You can build a Linux executable from macOS, Linux, or Windows using Go cross-compilation:

root@kitploit:~
# Linux amd64 binary
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -trimpath -ldflags "-s -w" -o bin/poc-test-linux-amd64 .

# Linux arm64 binary
CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -trimpath -ldflags "-s -w" -o bin/poc-test-linux-arm64 .

These commands produce static ELF binaries (no shared libc dependency).

Prebuilt Binaries In Repo

This repository includes:

  • bin/poc-test-linux-amd64
  • bin/poc-test-linux-arm64

Direct use on Linux (authorized test environments only):

root@kitploit:~
chmod +x bin/poc-test-linux-amd64
./bin/poc-test-linux-amd64 <target-binary> [arg1 arg2 ...] [optional_file_to_capture]

Verified Command Results

Validated in this repo on May 17, 2026:

  • go mod tidy: success
  • go build -o poc-test .: success
  • ./poc-test on non-Linux host: expected Linux-only exit message
  • CGO_ENABLED=0 GOOS=linux GOARCH=amd64 ...: success
  • CGO_ENABLED=0 GOOS=linux GOARCH=arm64 ...: success

Responsible Use

This code is shared to support security research, validation, and patch verification. You are responsible for complying with all laws, policies, and authorization requirements.

Download Tool