Tools

pengalaman-1t/cve-2021-4034

Exploit for CVE-2021-4034 (PwnKit) that provides a root shell via polkit pkexec vulnerability. Includes source code and build instructions.

pascal-gujer/cve-2026-31431

Proof-of-concept exploit for CVE-2026-31431, a Linux local privilege escalation via authencesn logic bug, with ARM64 variant for authorized lab…

novysodope/copy-fail-cve-2026-31431-c

CVE-2026-31431 - standalone binary exploit (no Python required)

nomaisthere/cve-2026-3888

Linux LPE via snap-confine + systemd-tmpfiles, explained in depth

nasawyer7/iobitunlockerunlocker

(0 day) CVE-2026-37334 Moves or Copies any file. Bypasses previous patch with a checksum trick. IObit Unlocker v. 1.3.0

locksec/cve-2021-4034

Exploit PoC for the polkit pkexec (PWNKIT) vulnerability

krn966/cve-2025-27591

Local privilege escalation exploit for CVE-2025-27591, abusing insecure symlink handling in the below utility's logging to overwrite arbitrary files…

farazsth98/exploit-cve-2025-39946

Exploit for CVE-2025-39946, a bug in the Linux kernel's net/tls subsystem.

cspshivam/cve-2021-4034

Exploit for CVE-2021-4034 (pwnkit) targeting pkexec, providing pre-compiled binaries for x86_64 systems to achieve local privilege escalation.

cs8425/copy-fail-go

Go-based exploit for CVE-2026-31431, a local privilege escalation vulnerability, that modifies /usr/bin/su to gain root access on Linux distributions.

callrbx/pkexec-lpe-poc

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in pkexec, allowing arbitrary payload execution with root privileges.

c3c/cve-2021-4034

Precompiled multi-architecture exploit for CVE-2021-4034 (pkexec LPE) that drops a shared object to gain root privileges, with build scripts for…

barebackbandit/cve-2021-3156

Exploit for CVE-2021-3156, a heap-based buffer overflow in sudo's argument parsing, enabling local privilege escalation to root.

ayoub-elbouzi/cve-2021-4034-pwnkit

PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)

aemmitt-ns/skeleton

Zero-click remote code execution exploit for CVE-2021-0326 targeting Android devices, including the Peloton Bike, with a proof-of-concept requiring…

abdullaabdullazade/cve-2026-31431

Exploit for CVE-2026-31431, a Linux kernel authencesn vulnerability enabling local privilege escalation to root via page cache manipulation.

yakumwamba/poc-cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation in polkit's pkexec, verified on Debian 10 and CentOS 7.

totallynotahaxxer/cve-2021-4034

Proof-of-concept exploit for CVE-2021-4034, a local privilege escalation in pkexec, implemented in Go.