
Kernel-exploitation
Linux kernel exploit development notes and scripts for CTF challenges, covering initramfs extraction, msg_msg/ldt_struct abuse, and practical…

Linux kernel exploit development notes and scripts for CTF challenges, covering initramfs extraction, msg_msg/ldt_struct abuse, and practical…

CVE-2026-43499 PoC Scanner

Linux kernel local privilege escalation PoC for CVE-2026-43503 (DirtyClone). Exploits a cloned sk_buff flag loss to write into page-cache memory,…

Educational Linux kernel exploit for CVE-2024-1086, demonstrating privilege escalation via an nftables double-free vulnerability in netfilter.

Technical analysis and proof-of-concept demonstrating a bypass of Linux kernel Spectre-BTI user-space mitigations via prctl and seccomp, with…

Speculative Store Bypass (CVE-2018-3639) proof of concept for Linux

Reproduction of CVE-2016-5195 (Dirty COW) Linux local privilege escalation exploit. Provides a ready-to-compile C source and step-by-step execution…

proof-of-concept (PoC) for linux dists based on Debian, CentOS and RedHat - exploit 1

Linux kernel exploit for CVE-2020-27786 using userfaultd race condition to trigger use-after-free, leak kernel addresses via msg_msg, and overwrite…

Exploit for CVE-2026-46215, a Linux kernel DRM GEM use-after-free local privilege escalation. Uses racing, slab spraying, and Dirty Pipe-style file…

Educational exploit for CVE-2022-2588, a Linux kernel race condition leading to privilege escalation. Includes Vagrant setup for a vulnerable machine…

my exp for CVE-2020-27194, tested on linux kernel 5.8.14.

Linux Kernel nf_tables Use-After-Free (CVE-2026-23111) — LPE PoC

CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9

This is a Linux Kernel Local Privilege Escalation PoC code for CVE-2026-52943 a use-after-free in skbuff.c, my first 0day found by me in linux kernel

Proof-of-concept exploit for CVE-2024-0582, a Linux kernel vulnerability. Leverages io_uring for buffer manipulation, KASLR leak, and privilege…

n-day exploit for CVE-2025-21756 targeting a Linux kernel vsock vulnerability, with a modified spray step and accompanying writeup for educational…

Proof-of-concept exploit for CVE-2025-39965, a Linux XFRM subsystem vulnerability, demonstrating exploitation in an isolated emulator environment for…