This is proof-of-concept code for leaking host KASLR bits from a KVM guest based on the cool research “TagBleed: Breaking KASLR on the Isolated Kernel Address Space using Tagged TLBs” by VUSec [1]. Some notes from the paper and references:
Las características principales de renorobert/tagbleedvmm son: Vulnerability Exploits.
Las alternativas de código abierto para renorobert/tagbleedvmm incluyen: zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… v4bel/dirtyfrag — dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write… arinerron/cve-2022-0847-dirtypipe-exploit — A root exploit for CVE-2022-0847 (Dirty Pipe). badsectorlabs/copyfail-go — A Go implementation of copyfail (CVE-2026-31431). bluefrostsecurity/cve-2020-0041 — Exploits for Android Binder bug CVE-2020-0041. b17fr13nds/kernel-exploits — This is where I'm uploading kernel exploits written by me.
Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit known security flaws in server environments such as WebLogic, Struts2, Tomcat, and JBoss. It functions as a remote code execution toolkit and a web shell deployment framework for triggering unauthorized command execution and establishing persistent access on remote systems. The project includes specialized utilities for internal network reconnaissance, specifically using server-side request forgery to scan for open ports and services. It further provides mechanisms for bypassing a
dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels. The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions. The tool covers kernel memory manipulation and the development of exploit chains to test local pri
A root exploit for CVE-2022-0847 (Dirty Pipe)
This is where I'm uploading kernel exploits written by me