
android-kernel-exploitation
Hands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.

Hands-on workshop for learning Android kernel vulnerability analysis and exploitation, with Docker-based build environment and practical exercises.

Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)

Using CVE-2021-40449 to manual map kernel mode driver

Stack buffer overflow PoC for a hardware wallet USB descriptor parser (CVE-2026-22013), showing return-address overwrite and code execution via…

Local Privilege Escalation in polkit's pkexec (CVE-2021-4034)

Exploit used against the Netgear R6700v3 during Pwn2Own Austin 2021

Linux kernel LPE exploit (CVE-2026-31431) using AF_ALG + splice to overwrite setuid-binary page cache for root. No race conditions, works on all…

CVE-2018-6574 POC : golang 'go get' remote command execution during source code build

A number of exploits and tools I've written for CVEs accredited to Marshall Whittaker/oxagast

CVE-2022-0847 Python exploit to get root or write a no write permission, immutable or read-only mounted file.

Educational Linux privilege escalation exploit targeting CVE-2016-5195 (Dirty COW) to demonstrate kernel vulnerability exploitation and root access…

Proof-of-concept exploits for VirtualBox guest-to-host escape vulnerabilities CVE-2019-2525 and CVE-2019-2548, with a Python library for HGCM…

Tools for get offsets and adding patch for support i386

beginner friendly write-up for the TryHackMe easy level module- polkit:CVE-2021-3560

Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.

Looney Tunables CVE-2023-4911

A root tool based on the [CVE-2015-1805 vulnerability](https://access.redhat.com/security/cve/cve-2015-1805) It supports 32 and 64bit, get sys call…

Below code takes advantage of a known vulnerability [Dirty COW (CVE-2016-5195)] 🔥