Awesome GitHub RepositoriesExploit Development Tools

pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

linux-exploit-suggester is a diagnostic utility and vulnerability scanner designed to identify potential kernel exploits on Linux systems. It functions as a privilege escalation auditor by matching system information and kernel versions against a database of known security flaws. The tool differentiates itself by filtering and ranking exploits based on specific system properties and runtime security configurations. It evaluates kernel hardening settings, such as memory protection mechanisms, to discard inapplicable exploits and prioritize candidates by their probability of success. The softw

dirtyfrag este un proof-of-concept de exploit pentru escaladarea privilegiilor în kernel-ul Linux. Acesta vizează vulnerabilitățile de scriere în page-cache pentru a ridica permisiunile utilizatorului la niveluri administrative de root. Proiectul demonstrează un lanț de exploit determinist care utilizează proof-of-concept-uri funcționale pentru vulnerabilități în implementarea protocolului xfrm-ESP și mecanismul RxRPC. Prin înlănțuirea acestor vulnerabilități de corupere a memoriei, exploit-ul obține acces root fără a se baza pe condiții de cursă (race conditions) bazate pe timing. Instrumentul acoperă manipularea memoriei kernel-ului și dezvoltarea de lanțuri de exploit pentru a testa escaladarea locală a privilegiilor și a efectua cercetări privind vulnerabilitățile Linux.

Meltdown este un set de utilitare software concepute pentru a ocoli randomizarea adreselor de kernel și a face dump la memoria fizică pentru a exploata vulnerabilități de securitate la nivel hardware. Servește drept dovadă de concept pentru vulnerabilitatea hardware Meltdown, permițând citirea memoriei protejate a kernel-ului pe procesoarele afectate. Instrumentul oferă capabilități pentru a identifica offset-ul secret de randomizare al hărții fizice directe pentru a localiza memoria kernel-ului. De asemenea, include funcționalitatea de a exporta segmente mari de memorie fizică în format hexdump pentru recuperarea șirurilor și parolelor sensibile. Proiectul acoperă analiza memoriei prin calcularea offset-ului de kernel și scurgerea memoriei fizice. Include, de asemenea, capacitatea de a măsura acuratețea și consistența datelor scurse din memoria fizică pentru a verifica fiabilitatea vulnerabilității hardware.

This project is a proof of concept implementation for CVE-2026-31431, serving as a local privilege escalation tool for the Linux kernel. It functions as an exploit that allows a standard user account to obtain root permissions. The tool demonstrates a kernel page cache attack, where root access is achieved by writing shellcode into the cached pages of a privileged binary. This process manipulates how the Linux kernel handles page caches to execute code with elevated permissions. The repository covers areas of Linux security research, including kernel memory corruption analysis and local priv

This project is a technical repository of kernel exploit guides, memory corruption analyses, and archived methods for gaining root access. It serves as a centralized library of security flaws and reproduction steps used for testing system protections and verification. The documentation focuses on the Linux kernel, providing technical breakdowns of how memory management errors and multi-page write techniques allow for the modification of read-only files. It details the use of race conditions to achieve administrative privilege escalation. The repository covers a broad surface of security rese

Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.

A tool for checking the security hardening options of the Linux kernel

Next-Generation Linux Kernel Exploit Suggester

A tool to recover a fully analyzable .ELF from a raw kernel, through extracting the kernel symbol table (kallsyms)

Dirty Pipe root exploit for Android (Pixel 6)

angrop

poc it like it's hot

kernel privilege escalation enumeration and exploitation framework

An automated script that download potential exploit for linux kernel from exploitdb, and compile them automatically

KASLD derandomises the Linux kernel's virtual and physical memory layout as an unprivileged local user.

Android/Linux vmlinux loader

Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)