phalanx-b6.tar.bz2
Phalanx is a self-injecting kernel rootkit designed for the Linux 2.6 branch that does not use the now-disabled /dev/kmem device. Features include file hiding, process hiding, socket hiding, a tty...
View ArticleLinux 3.4+ CONFIG_X86_X32=y Local Root
Linux 3.4+ local root exploit that spawns a root shell leveraging CONFIG_X86_X32=y.
View ArticleUbuntu 12.04 / 14.04 / 14.10 / 15.04 overlayfs Local Root
The overlayfs filesystem does not correctly check file permissions when creating new files in the upper filesystem directory. This can be exploited by an unprivileged process in kernels with...
View ArticleMac OS X 10.9.5 / 10.10.5 rsh/libmalloc Privilege Escalation
This Metasploit module writes to the sudoers file without root access by exploiting rsh and malloc log files. Makes sudo require no password, giving access to su even if root is disabled. Works on OS X...
View ArticleCentOS 7.1 / Fedora 22 abrt Local Root
CentOS version 7.1 and Fedora version 22 abrt local root exploit. It leverages abrt-hook-ccpp insecure open() usage and abrt-action-install-debuginfo insecure temp directory usage.
View ArticleRHEL 7.0 / 7.1 abrt / sosreport Local Root
Local root exploit for Redhat Enterprise Linux versions 7.0 and 7.1 that leverages abrt/sosreport.
View ArticleUbuntu 14.04 LTS / 15.10 overlayfs Local Root
Ubuntu 14.04 LTS and 15.10 overlayfs local root exploit.
View ArticleLinux Kernel 3.13.1 Recvmmsg Privilege Escalation
This Metasploit module attempts to exploit CVE-2014-0038, by sending a recvmmsg system call with a crafted timeout pointer parameter to gain root. This exploit has offsets for 3 Ubuntu 13 kernels built...
View ArticleOverlayfs Privilege Escalation
This Metasploit module attempts to exploit two different CVEs (CVE-2015-1328 and CVE-2015-8660) related to overlayfs.
View ArticleLinux Kernel 4.4.0 AF_PACKET Race Condition / Privilege Escalation
Linux AF_PACKET race condition exploit for Ubuntu 16.04 x86_64.
View ArticleAF_PACKET chocobo_root Privilege Escalation
This Metasploit module exploits a race condition and use-after-free in the packet_set_ring function in net/packet/af_packet.c (AF_PACKET) in the Linux kernel to execute code as root (CVE-2016-8655)....
View ArticleABRT sosreport Privilege Escalation
This Metasploit module attempts to gain root privileges on RHEL systems with a vulnerable version of Automatic Bug Reporting Tool (ABRT) configured as the crash handler. sosreport uses an insecure...
View Article
