
copy-fail-zig
Zig implementation of the Copy Fail Linux LPE (CVE-2026-31431) providing a standalone binary to exploit the vulnerability for security research and…

Zig implementation of the Copy Fail Linux LPE (CVE-2026-31431) providing a standalone binary to exploit the vulnerability for security research and…

Multi-language implementation and compatibility with older versions of Python.

Root exploit for CVE-2021-4034 (PwnKit) that abuses pkexec's out-of-bounds write to escalate privileges to root on Linux systems.

Proof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation via splice() and crafted socket options, enabling arbitrary…

An adapted version of the copy fail exploit to use parameters instead of dropping you into a root shell

Proof-of-concept exploit for CVE-2019-0808, a Windows kernel privilege escalation vulnerability. Demonstrates exploitation of a use-after-free bug in…

Exploit for CVE-2023-35080 leveraging a write primitive in the Ivanti/Pulse VPN client kernel driver on Windows to achieve privilege escalation.

Exploit for CVE-2021-4034, a memory corruption vulnerability in pkexec of polkit, enabling local privilege escalation to root on Linux systems.

Proof Of Concept for the 2021's pkexec vulnerability CVE-2021-4034

Proof of Concept for CVE-2021-4034 (with experimental traceless exploitation)

Rust implementation of the CVE-2021-4034 pkexec privilege escalation exploit, with scripts to download and unpack a vulnerable pkexec for testing.

Win32k elevation of privilege exploit for CVE-2015-1701, providing proof-of-concept code for kernel-mode privilege escalation on vulnerable Windows…

Dell Driver EoP (CVE-2021-21551)

CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 / 23G71)

Firefox content-to-parent IPDL privilege escalation (N-day, bug 2054416): forged PDocumentChannel with RemoteTypeOverride -> privilegedabout process…

Dirty Frag - kernel Linux critical Vulnerability

CVE-2026-31431 (Copy Fail) novel exploit: live code corruption via page cache. Overwrites libc exit() code through MAP_PRIVATE page sharing — affects…