How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit known security flaws in server environments such as WebLogic, Struts2, Tomcat, and JBoss. It functions as a remote code execution toolkit and a web shell deployment framework for triggering unauthorized command execution and establishing persistent access on remote systems. The project includes specialized utilities for internal network reconnaissance, specifically using server-side request forgery to scan for open ports and services. It further provides mechanisms for bypassing a
dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels. The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions. The tool covers kernel memory manipulation and the development of exploit chains to test local pri
A root exploit for CVE-2022-0847 (Dirty Pipe)
A Go implementation of copyfail (CVE-2026-31431)
This is where I'm uploading kernel exploits written by me
The main features of b17fr13nds/kernel-exploits are: Vulnerability Exploits.
Open-source alternatives to b17fr13nds/kernel-exploits include: zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… v4bel/dirtyfrag — dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write… arinerron/cve-2022-0847-dirtypipe-exploit — A root exploit for CVE-2022-0847 (Dirty Pipe). bluefrostsecurity/cve-2020-0041 — Exploits for Android Binder bug CVE-2020-0041. bonfee/cve-2022-0995 — CVE-2022-0995 exploit. badsectorlabs/copyfail-go — A Go implementation of copyfail (CVE-2026-31431).