
CVE-2021-27876
Unauthenticated RCE exploit for Veritas Backup Exec Agent (CVE-2021-27876/77/78) — SHA auth bypass to SYSTEM via NDMP

Unauthenticated RCE exploit for Veritas Backup Exec Agent (CVE-2021-27876/77/78) — SHA auth bypass to SYSTEM via NDMP

Proof-of-concept exploit for CVE-2021-4034 (PwnKit), a local privilege escalation vulnerability in polkit's pkexec, allowing unprivileged users to…

C-based proof-of-concept exploit for CVE-2021-4034 (PwnKit) enabling local privilege escalation via out-of-bounds write in pkexec. Includes build…

stack based buffer overflow in MsIo64.sys, Proof of Concept Local Privilege Escalation to nt authority/system

Go implementation of the PwnKit Linux Local Privilege Escalation exploit (CVE-2021-4034)


Exploitation and mitigation analysis of CVE-2021-3156 heap-based buffer overflow in sudo

This exploit is based on CVE-2021-33393 and was built upon the original exploit by Mücahit Saratar, extending it to achieve a reverse shell with root…

A simple Docker lab and Exploit setup for CVE-2021-3156 - "Baron Samedit".

Local Privilege Escalation (LPE) vulnerability in Polkit - Pwnkit

arbitrary kernel read/write in dbutil_2_3.sys, Proof of Concept Local Privilege Escalation to nt authority/system

windows-kernel-exploits Windows平台提权漏洞集合

Proof-of-concept exploit collection targeting Linux kernel LPE, sudo heap overflow, and Chrome V8 OOB write vulnerabilities for penetration testing.


CVE-2021-42287/CVE-2021-42278 Scanner & Exploiter.

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

Exploit for CVE-2021-3156 (Baron Samedit), a heap-based buffer overflow in sudo, enabling local privilege escalation. Includes target list and…

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)