awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
V4bel avatar

V4bel/dirtyfrag

0
View on GitHub↗
4,845 stars·775 forks·C·14 views

Dirtyfrag

dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels.

The project demonstrates a deterministic exploit chain that utilizes functional proofs-of-concept for vulnerabilities in the xfrm-ESP protocol implementation and the RxRPC mechanism. By chaining these memory corruption vulnerabilities, the exploit achieves root access without relying on timing-based race conditions.

The tool covers kernel memory manipulation and the development of exploit chains to test local privilege escalation and conduct Linux vulnerability research.

Features

  • Page Cache Exploitation - Targets page-cache write vulnerabilities to achieve reliable root privilege escalation.
  • Kernel Exploitation - Employs kernel manipulation techniques and memory corruption to bypass system security.
  • Page Cache Exploits - Implements a technique for manipulating the operating system page cache to escalate permissions to root.
  • Administrative Privilege Escalation - Provides a mechanism to elevate user-mode process permissions to administrative root access.
  • Kernel Privilege Escalation Exploits - Provides a proof-of-concept exploit for obtaining root access on Linux distributions.
  • Linux Kernel Privilege Escalation - Demonstrates gaining root administrative access on Linux by exploiting kernel vulnerabilities.
  • Kernel Privilege Escalations - Escalates user permissions to root access by exploiting page-cache write vulnerabilities within the kernel.
  • Kernel Vulnerability Research - Conducts technical analysis and demonstration of page-cache write vulnerabilities in the Linux kernel.
  • Vulnerability Exploits - Provides a proof-of-concept exploit chain targeting specific Linux kernel vulnerabilities.
  • Privileged Filesystem Access - Obtains root administrative privileges to access and modify restricted system files.
  • Exploit Chains - Implements a deterministic sequence of system calls to bypass security mitigations and ensure stable payload execution.
  • Vulnerability Proofs of Concept - Ships a functional demonstration of a vulnerability within the RxRPC mechanism.
  • Exploit Development - Exploit for Linux kernel privilege escalation.
  • Exploit Development Tools - Exploit code for memory fragmentation vulnerabilities.
  • Privilege Escalation Exploits - Exploit for the Dirty Frag Linux kernel vulnerability.

Star history

Star history chart for v4bel/dirtyfragStar history chart for v4bel/dirtyfrag

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Projects sharing features with Dirtyfrag

These projects share indexed features with Dirtyfrag. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • theori-io/copy-fail-cve-2026-31431theori-io avatar

    theori-io/copy-fail-CVE-2026-31431

    3,958View on GitHub↗

    This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for the Linux kernel. It functions as an exploit that allows a standard user account to obtain root permissions. The tool demonstrates a kernel page cache attack, where root access is achieved by writing shellcode into the cached pages of a privileged binary. This process manipulates how the Linux kernel handles page caches to execute code with elevated permissions. The repository covers areas of Linux security research, including kernel memory corruption analysis and local priv

    Python
    View on GitHub↗3,958
  • x0rz/eqgrpx0rz avatar

    x0rz/EQGRP

    4,201View on GitHub↗

    EQGRP is a remote access trojan framework and post-exploitation toolkit. It provides a centralized command and control infrastructure for deploying persistent implants and managing remote agents across diverse operating systems. The project includes tools for digital forensic evasion, such as modifying system logs and filesystem timestamps to remove execution traces. It features a network interception system for capturing and reconstructing data streams by hooking into the system root, as well as exploits designed for kernel privilege escalation to elevate process permissions to administrativ

    Perl
    View on GitHub↗4,201
  • zhzyker/exphubzhzyker avatar

    zhzyker/exphub

    4,282View on GitHub↗

    Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit known security flaws in server environments such as WebLogic, Struts2, Tomcat, and JBoss. It functions as a remote code execution toolkit and a web shell deployment framework for triggering unauthorized command execution and establishing persistent access on remote systems. The project includes specialized utilities for internal network reconnaissance, specifically using server-side request forgery to scan for open ports and services. It further provides mechanisms for bypassing a

    Pythoncve-2020-10199cve-2020-10204cve-2020-11444
    View on GitHub↗4,282
  • iaik/meltdownIAIK avatar

    IAIK/meltdown

    4,172View on GitHub↗

    Meltdown is a set of software utilities designed to bypass kernel address randomization and dump physical memory to exploit hardware-level security vulnerabilities. It serves as a proof of concept for the Meltdown hardware vulnerability, enabling the reading of protected kernel memory on affected processors. The tool provides capabilities to identify the secret randomization offset of the direct physical map to locate kernel memory. It also includes functionality to export large segments of physical memory into hexdump format for the recovery of sensitive strings and passwords. The project c

    C
    View on GitHub↗4,172
Compare all 30 related projects→

Frequently asked questions

What does v4bel/dirtyfrag do?

dirtyfrag is a proof-of-concept exploit for Linux kernel privilege escalation. It targets page-cache write vulnerabilities to elevate user permissions to administrative root levels.

What are the main features of v4bel/dirtyfrag?

The main features of v4bel/dirtyfrag are: Page Cache Exploitation, Kernel Exploitation, Page Cache Exploits, Administrative Privilege Escalation, Kernel Privilege Escalation Exploits, Linux Kernel Privilege Escalation, Kernel Privilege Escalations, Kernel Vulnerability Research.

Which projects share features with v4bel/dirtyfrag?

Projects with overlapping indexed features include: theori-io/copy-fail-cve-2026-31431 — This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for… x0rz/eqgrp — EQGRP is a remote access trojan framework and post-exploitation toolkit. It provides a centralized command and control… zhzyker/exphub — Exphub is a CVE exploit script library and enterprise software vulnerability suite designed to verify and exploit… iaik/meltdown — Meltdown is a set of software utilities designed to bypass kernel address randomization and dump physical memory to… 0xdeadbeefnetwork/ssh-keysign-pwn — Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd… polygraphene/dirtypipe-android — Dirty Pipe root exploit for Android (Pixel 6).