How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Steal SSH host private keys and /etc/shadow via the ptracemayaccess mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.
The main features of 0xdeadbeefnetwork/ssh-keysign-pwn are: Privilege Escalation Exploits, Vulnerability Exploits.
Open-source alternatives to 0xdeadbeefnetwork/ssh-keysign-pwn include: v4bel/dirtyfrag — dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write… zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… antoniococo/juicypotatong — Another Windows Local Privilege Escalation from Service Account to System. antoniococo/roguepotato — Another Windows Local Privilege Escalation from Service Account to System. arinerron/cve-2022-0847-dirtypipe-exploit — A root exploit for CVE-2022-0847 (Dirty Pipe). antoniococo/remotepotato0 — Windows Privilege Escalation from User to Domain Admin.
dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels. The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions. The tool covers kernel memory manipulation and the development of exploit chains to test local pri
Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit known security flaws in server environments such as WebLogic, Struts2, Tomcat, and JBoss. It functions as a remote code execution toolkit and a web shell deployment framework for triggering unauthorized command execution and establishing persistent access on remote systems. The project includes specialized utilities for internal network reconnaissance, specifically using server-side request forgery to scan for open ports and services. It further provides mechanisms for bypassing a
Another Windows Local Privilege Escalation from Service Account to System
Windows Privilege Escalation from User to Domain Admin.