Tools

sammwyy/copyfail-rs

Copy Fail exploit (CVE-2026-31431) but in Rust.

perongh/badepoll-selinux-disabler

Use CVE-2026-43074 to disable SELinux on Android (Linux 6.6/6.12)

dgrobinson0/copyfile_cve-2026-31431

Local privilege escalation exploit for CVE-2026-31431, corrupting setuid binaries in page cache via AF_ALG and splice to gain root shell.

dennisdgr/cve-2026-31431-poc

An adapted version of the copy fail exploit to use parameters instead of dropping you into a root shell

ikow/cve-2026-31431-live-code-corruption

CVE-2026-31431 (Copy Fail) novel exploit: live code corruption via page cache. Overwrites libc exit() code through MAP_PRIVATE page sharing — affects…

rek7/fireelf

fireELF - Fileless Linux Malware Framework

tgies/copy-fail-c

Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori / Xint.

0b0111100/2004

Linux kernel privilege escalation exploits targeting CVE-2004-0077 and CVE-2004-1235, including caps_to_root technique for gaining root access.

0b0111100/2006

Linux kernel privilege escalation exploits targeting CVE-2006-2451 and CVE-2006-3626, providing proof-of-concept code for local privilege escalation…

0b0111100/2009

Collection of Linux kernel exploits targeting CVE-2009-1185, CVE-2009-1337, CVE-2009-2692, CVE-2009-2698, and CVE-2009-3547, providing…

xn0kkx/cve-2026-31431_copyfail_linuxkernel_lpe

Educational rewrite of the Copy Fail PoC (CVE-2026-31431) — Linux kernel LPE via algif_aead in-place crypto + splice() page-cache write

leebaird/discover

Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload…

aflplusplus/libafl

Advanced Fuzzing Library - Slot your Fuzzer together in Rust! Scales across cores and machines. For Windows, Android, MacOS, Linux, no_std, ...

dana-at-cp/backdoor-apk

backdoor-apk is a shell script that simplifies the process of adding a backdoor to any Android APK file. Users of this shell script should have…

mythicagents/thanatos

Mythic C2 agent targeting Linux and Windows hosts written in Rust

rand0m1ze/ezsploit

Linux bash script automation for metasploit

painoob/copy-fail-exploit-cve-2026-31431

Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python…

google/kernel-research

Linux kernel exploitation toolkit providing an exploit-building library, ROP chain and stack pivot generators, kernel image runners, and a target…