rootkit
nurupo/rootkitLinux kernel module that grants root privileges, hides processes/files, and protects itself from unloading, designed for educational purposes on…
persistence-mechanismspost-exploitationprivilege-escalation
nurupo/rootkitLinux kernel module that grants root privileges, hides processes/files, and protects itself from unloading, designed for educational purposes on…
spensercai/copy_failRust exploit PoC for Linux kernel LPE CVE-2026-31431 (AF_ALG page-cache write) plus eBPF runtime defense blocking AF_ALG socket creation via LSM or…
vasyapokemon/cve-2026-31431Research and detection toolkit for Linux kernel LPE CVE-2026-31431, including exploit analysis, YARA rules, auditd/Falco detection, patching guide,…
rippsec/cve-2026-31431-copy-failComprehensive analysis of CVE-2026-31431, a Linux kernel LPE, including exploit methodology, detection scripts, YARA rules, auditd and Falco…
kwilck/copyfailCopy Fail (CVE-2026-31431) is a logic flaw in the Linux kernel's algif_aead module — part of the AF_ALG userspace crypto API. It was disclosed on…
euriconicacio/copy-fail-cve-2026-31431-pocProof-of-concept exploit for CVE-2026-31431, a Linux kernel local privilege escalation vulnerability in the algif_aead module, enabling unprivileged…
u1tr0nex/cve-2026-31431-copyfail-labLab testing documentation for CVE-2026-31431 (Copy Fail) Linux kernel LPE
alvaroguzmancode/cve-2026-31431-mitigacionTechnical analysis of CVE-2026-31431, a Linux kernel local privilege escalation in the algif_aead module, including root cause, affected versions,…
shotafry/copyfail-exploits-cve-2026-31431Multi-language educational exploit implementations for CVE-2026-31431, a Linux kernel local privilege escalation via the algif_aead module, with a…
kungfulon/nf-tables-lpeLinux kernel privilege escalation exploits targeting Netfilter's nf_table module, developed by Team Orca for multiple CVEs.
kasunpriyashan/y2s1-project-linux-exploitaion-using-cve-2016-5195-vulnerabilityEducational Linux privilege escalation exploit targeting CVE-2016-5195 (Dirty COW) to demonstrate kernel vulnerability exploitation and root access…
ekamsinghwalia/-detection-and-mitigation-for-cve-2022-1679Shell script to detect and mitigate CVE-2022-1679, a use-after-free vulnerability in the Linux kernel's ath9k wireless driver that allows local…
gubiczap/cve-2026-31431-checkerShell scanner for CVE-2026-31431 "Copy Fail" — a local privilege escalation via Linux kernel page cache corruption (algif_aead/AF_ALG). Checks kernel…
ryan2929/cve-2026-31431Public exploit for a Linux kernel zero-day (CVE-2026-31431) enabling local privilege escalation to root on distributions since 2017. Includes a…
ochebotar/copy-fail-cve-2026-31431-detection-probeSafe detection tooling for CVE-2026-31431 "Copy Fail" and CVE-2026-43284 "Dirty Frag" — a local privilege escalation in the Linux kernel's algif_aead…
matheuzsecurity/singularityStealthy Linux kernel rootkit (LKM) for 6.x kernels with advanced process/network hiding, privilege escalation, and comprehensive evasion of eBPF…
adityasingh108/cve-2026-31431-metasploit-exploitAutomated Metasploit post-exploitation module for CVE-2026-31431 ("Copy Fail"). Weaponizes a deterministic logic flaw in the Linux kernel AF_ALG…
spydomain/cve-2022-0435-pocStack overflow exploit for CVE-2022-0435 in the TIPC module, providing local privilege escalation to root on Ubuntu kernels.